General

  • Target

    GLauncher.exe

  • Size

    41KB

  • MD5

    59b17c9a7285b0cb5cb5ecc4e4eb1faf

  • SHA1

    f2cac19db91d4f78d92894ee8f01882e1aeeffcf

  • SHA256

    2386e9a2bb7b7d8e54884aefe4187e7066a6e83aa5f0d79660a76d6ce414cd61

  • SHA512

    8edc193fc90940027a85dd0ec261b1eed69a1dee0616c6bd626ecb80240cec56d4a0715591136b2714f605871865e76befd733ab44e99962bda3079f8a1e9b24

  • SSDEEP

    768:8yIOKKVKWC62lXvgggULJF5PG9pmW6vOwhS3EuzJ:8zbKVKWLSXvvg+FI9AW6vOwMFN

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

materials-thumbzilla.gl.at.ply.gg:1337

Mutex

gwUQJjI0YsIM8WhX

Attributes
  • Install_directory

    %Temp%

  • install_file

    Microsoft Network.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GLauncher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections