Overview

overview

10

Static

static

10

Cracked.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Cracked.exe

  • Size

    76KB

  • MD5

    0e8b6157e6c13fd4e35453b53fbc2e80

  • SHA1

    b6d61defb916adc817711ce811fff6d9f3b18a0b

  • SHA256

    ce3522f20e655d531df5f8e40d37f57d276e7ca8fdf126d57735969c86b10a62

  • SHA512

    9925cbdc643fa3bc402391f7acf3e6727896b6eb587b16601565cb348119d2627dff4853c542387dc17b41d1dc161f348602109624dd50c2296757112b9acc72

  • SSDEEP

    1536:g+gvc89EHR3J1cyMiltUXkAbBZLbXK072Mq4BAuiyqO0/OVg4D:PgU89ENDn7UXkAbBZPXKhf4BRdqO0gRD

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    Cracked.exe

  • telegram

    https://api.telegram.org/bot7006468177:AAEjUyc53owWdXWMasYo_ZE1Y7t2sH1O718/sendMessage?chat_id=809478226

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Cracked.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections