Overview

overview

10

Static

static

10

Standlaunchpad.exe

windows7-x64

10

Standlaunchpad.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Standlaunchpad.exe

  • Size

    111KB

  • MD5

    54cc7925afe5d04702635687730555ca

  • SHA1

    508039748ac0fcaf7432770d70749250b25fefd1

  • SHA256

    8cd7eebce83e61aa9de3fd07574c05fdd930607dd6e371ef2ba3705f917cefe5

  • SHA512

    0661132b3033d2e62fb509778d328bed60272c4f0920cb37ca67829ceb934c9f5d25e6bd50bb4d351a984278e58667b4cc93028c0da73bf4623fa42df4fa0f16

  • SSDEEP

    3072:ga0AGASuxDyFaaehGwbNmNEbM6FJkQLuO1Mwr:2ASEyFTaGwb26IkGw

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:4675

us3.localto.net:4675
Attributes
  • Install_directory

    %Temp%

  • install_file

    Stand.exe

  • telegram

    https://api.telegram.org/bot6916721041:AAGsGXyaplDWQ9HJlE88Z36KtBFClSB3E20

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Standlaunchpad.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections