Overview

overview

10

Static

static

10

robloxExec...TA.exe

windows7-x64

10

robloxExec...TA.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    robloxExecutorBETA.exe

  • Size

    138KB

  • MD5

    6c3f932269649e4ead922dc42a09fd88

  • SHA1

    b78016b7f4e472cebe50f833b13bc1c5ac3130d5

  • SHA256

    62e4dd31e8a79ba9d85cc754f99a788b9004b5bbc5b8bf754336ee9e0e83426e

  • SHA512

    2f808f8966696185255d8811a81fb9e3f42aad2e9ba7047fdaf8af49775a5637168b20a1c4f8b15d5b4a6dfac6078e0d40d73274739027abb16814db4a677963

  • SSDEEP

    1536:8TaKPLcvsNJofTwST7AyGMIbj9UpNBnzR56RmOK4xuQGy:8rR+ZTrGMIbj9UtdOKlfy

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • robloxExecutorBETA.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections