General

  • Target

    Streamsound Installer V.1.4.8.exe

  • Size

    169KB

  • MD5

    30f1b5a1452e3a1b8fa107e9208030ef

  • SHA1

    7b48620ef151b87a84c7f311193c713dff919925

  • SHA256

    a837cf090ced8226407695e3a9260451f80f4b3b3ecaf9a63510c7f2fdf87603

  • SHA512

    99d15b83ef3bb74e87306c671ade3cf2f90695d6d39794e9e5a6ae39059d0c79f2a0e8aa1b8fd876d17d3dc9452271b06b0d55e9545fad14f97806391428d914

  • SSDEEP

    3072:tGW4BN+f/r77XjbGtifrO5iFtONPBz65/M6If+3Js+3JFkKeTno:trr7TjbV6NPxBt25

Score
10/10

Malware Config

Extracted

Family

xworm

C2

bin-estates.gl.at.ply.gg:11437

Attributes
  • Install_directory

    %Temp%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Streamsound Installer V.1.4.8.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections