Overview

overview

10

Static

static

10

FreeNigers.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    FreeNigers.exe

  • Size

    69KB

  • MD5

    f7d98d22565bcc70a4979daa8397be80

  • SHA1

    a04ee66a22d22891f815168b25d907b8c9edf6c6

  • SHA256

    c7bd60030a50ddf9f70d4bc5b35bee5a791c82d2b0805e98efdd198b0de4e005

  • SHA512

    f4d280c76bb0a31d9ebc1bcf81ebe4f753a721189ac8571b0e9f7e6c93e1ba19faad13c37bec7e19442998a8bab93fee3fbd1d0597f6a34de9fe7bf051705478

  • SSDEEP

    1536:lT/g1i0Yw4VE/UBIl80SPtNXX+blYz4kGFfL6OO0XAW1QE:xoInwkZIl9avX+blYSfPOmAWuE

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

does-moment.gl.at.ply.gg:9438

Attributes
  • Install_directory

    %Public%

  • install_file

    Runtime Broker.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FreeNigers.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections