Overview

overview

10

Static

static

10

loader.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    loader.exe

  • Size

    103KB

  • MD5

    57c54b27b11836e2faf6c4657c8a22d5

  • SHA1

    30e9b69dedab88d2ad7ff861d20cc7f1f8e9d758

  • SHA256

    471dd0e3a1d26c42eff31167505816c3dac6ff8358ad228fc3272b0f7331f541

  • SHA512

    506a510df4c4a840d3286d5a7b7d472fd4e842170f6c3e08e46dae78994b79227d8c8e22a488e21e41953aa19e0f22bb02ab5f63436eb79c1f8391036addaf6f

  • SSDEEP

    1536:MfyEfopjWZW5P//U5VbxR+eGbiCb2jxexr6eaOpzmvG+n:MfipjWZwsbx0eGbiCsQ1JaOcvGK

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.0

C2

among-publication.at.ply.gg:42209

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

  • telegram

    https://api.telegram.org/bot6479156366:AAGNWOPgpaedmq9WXrda-yJviKA7U342o8s/sendMessage?chat_id=6141211911

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections