Overview

overview

10

Static

static

10

Solar Beta.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Solar Beta.exe

  • Size

    231KB

  • MD5

    136fce392b3eef4543e55540a4db3561

  • SHA1

    bfe3b342b42da250733e5d879fb6246d7777dceb

  • SHA256

    fbfe4f7a801c5a2d161f805bccd7bee3c0d2690164d8053cbbd044fece98ce18

  • SHA512

    007f7522bc7de371d376ac1743e2fc69a5a55c4af5dcc9024fb397d3f963c93edd08ce7ba28b3b7efb2c0ba6a628ce5bdf90813921ca8e46e6c0580052bd7838

  • SSDEEP

    3072:yIc8ib/m9QrPDOwGg8SKfbzxcwg7es6/Vsb8VKTu549oJMfF/H9N3Ky9NzLnv:yyib+xgUhcX7elbKTua9bfF/H9d9n

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:59769

usr-contemporary.gl.at.ply.gg:59769
Attributes
  • Install_directory

    %ProgramData%

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Solar Beta.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections