General

  • Target

    nigger.exe

  • Size

    58KB

  • MD5

    abb96dc265c42a9e9357b69cd911ffce

  • SHA1

    96a3619977f5b58a1cede6b960adca942e82d4e6

  • SHA256

    53fa4aaf3bd78521f9d402d0c793078353e6ff8f9d0ff7efcd8c686c79c69560

  • SHA512

    c56af566bb3ddf2731daa2a74936f0500b32ee36bd8184ee7c17924c9ed730b64bd4552a91fc55b870754e49196a30e6d414ba77bee960b18d4c9136e51087fb

  • SSDEEP

    1536:Bvf7dvzwTr1JVEUrq1xLAhhaL5b7JkbutjkfZNJN99Opv8gJaed:Bvf8CUrqMhILjkbu4Nn99OpEgTd

Score
10/10

Malware Config

Extracted

Family

xworm

C2

dc-coleman.gl.at.ply.gg:42550

Attributes
  • Install_directory

    %AppData%

  • install_file

    runbroker300.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nigger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.