Resubmissions

13/03/2024, 22:32

240313-2fyzdadc22 10

13/03/2024, 22:29

240313-2egcyadb56 10

General

  • Target

    fxzzh.exe

  • Size

    64KB

  • MD5

    52c87b08a86a321e0b6853217d152d55

  • SHA1

    63e6fa1bbc3d8513eca512077cde24122e216b18

  • SHA256

    08ccbdaec48c9049fa3a8fecf08192a73d159d4a3804c214b1a68f44963247b8

  • SHA512

    d5f3963a713708107ba92e46e8c6149bcdf8f0ee680fca630ecc670cfe579dae0cfdec1b0a33ce0156f4e0af9ba97ad587f3867131320a5f5d9488dcc8154100

  • SSDEEP

    1536:QloWeBLaVmJVbzkbyYYUmxP6C9OjMgCBq:5eVm3kbyY0xN9OjMdq

Score
10/10

Malware Config

Extracted

Family

xworm

C2

parts-disco.gl.at.ply.gg:60323

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fxzzh.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections