Overview

overview

10

Static

static

10

1234.exe

windows7-x64

10

1234.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1234.exe

  • Size

    245KB

  • MD5

    2fb529e2663b7fa3bae7307b6b9bb274

  • SHA1

    a916be1f70a22444a385d537fc8860dff3c82c4d

  • SHA256

    c4c8d454dcc25fe3369f4f98aae196dcdecad6852ff380e169960c0397efa0c0

  • SHA512

    57c8baf5980fcd28164bbd35eabf2c8dd6c5aeb5caa5e855b2db7220ce5c12b9206cf1c9425ed853d5f56b6d3f133d376c140a837300ccd1aa3fbec204efda6a

  • SSDEEP

    6144:KKmo3bz+lvUhcX7elbKTua9bfF/H9d9n:lCv3X3u+

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

north-untitled.gl.at.ply.gg:29298

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    discord.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1234.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections