Resubmissions

20/04/2024, 18:55

240420-xkw85afc74 10

General

  • Target

    Nerest RECODE 1.3.exe

  • Size

    325KB

  • MD5

    1be9e3639dd03c8c8358a94684be9acd

  • SHA1

    57c714647589e543ac1c2c8a4fa792c2c18180d0

  • SHA256

    b620ee5942f513d7d44a9ac50d03e03f839e326798283362b6aec359d9757ef7

  • SHA512

    e4aafccd2556be6995202b9b365a3fffcfcf8fb687cfb8969a4608fff834b35eb84969d3198a34fa725cea1aa151543791668480fb02340df7b3e9de723a46d4

  • SSDEEP

    6144:WYiAbGLG+GIIIIIIIhIIIIIIIIIIIIIIIU:WYsx

Score
10/10

Malware Config

Extracted

Family

xworm

C2

safe-towers.gl.at.ply.gg:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nerest RECODE 1.3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections