General
-
Target
e883c86c879e899be88060638edaa6b83619d13afd3513c24ca2d26af8c91b4e
-
Size
16KB
-
Sample
240419-vn1plsab55
-
MD5
b4ec1fe007150a7bb230197889f52076
-
SHA1
f35c1e55c1dbdcbc99a6af6a4f72e744d068fe50
-
SHA256
e883c86c879e899be88060638edaa6b83619d13afd3513c24ca2d26af8c91b4e
-
SHA512
616ea194d11248b56ca4b5f47450370fd887c03c27e1be322ef964d89246e7f250e8df752d0a494ac95e789132b039187cee6a486e56aa7c5dfe603e1d402054
-
SSDEEP
384:8ywRnKw3tcP9bHK12mBQTBHdypgrEdnUEG5Ei2vDR2XW:WRKUtObq12myTB9o2h2V2G
Behavioral task
behavioral1
Sample
e80426f5e4fa58d66cb1658b470e5c46bb35524379ff192dda7eb7c87d66a27d.exe
Resource
win7-20231129-en
Malware Config
Extracted
xworm
5.0
137.184.94.195:7000
tJ5XRwpcrvmkSpyf
-
install_file
USB.exe
-
telegram
https://api.telegram.org/bot6849306171:AAEXOowHoIXdJG2J0JE1MdL7UhvdbtW-i90/sendMessage?chat_id=5551685072
Targets
-
-
Target
e80426f5e4fa58d66cb1658b470e5c46bb35524379ff192dda7eb7c87d66a27d.exe
-
Size
34KB
-
MD5
fb6cad276f3152b0366a15da932cee8b
-
SHA1
6d7e0d78403284437b5f50f8c229292696a27e63
-
SHA256
e80426f5e4fa58d66cb1658b470e5c46bb35524379ff192dda7eb7c87d66a27d
-
SHA512
0ba4cfb8080ed6ebc58da3e1c7b93ccafe5e25b7633156a13746be6b65dc6c8c7fbd83dbf3a78584b4dd42aa52e46d876faf1abc123ff3bf202c03c3b1cdac08
-
SSDEEP
384:iIwDnjTJeDs3fL9CnfHIAxNFR2EguN4gRzpkFXBLT0OZwEJN2v99IkuisM8OlH6b:I0D69EfHIAxNOsNrwFo9jytOjhPbW
-
Detect Xworm Payload
-