General

  • Target

    Chiken nugget.exe

  • Size

    76KB

  • MD5

    ef3602358fd4bf273ba063433fdb84cf

  • SHA1

    77d0d6a023767a08f57a13cb0abba6ddea4b9d45

  • SHA256

    16a616f0e94747e0068f59077f3aef0d6083894ec390d306379a6ad2df33fcb3

  • SHA512

    7d0a49b882ea2a571195c5efc9c0e3cce4299b78cda4842663aa2ee5c4ab559a86fda261722c43a76cebbb899d7b1703aec0705262f1cbcc28f52ec106b925f8

  • SSDEEP

    1536:o3qce6L/zf7aZZ4YOPJHC/PXmNV9b4Y96GGqLyvZAclOimf:oJLr7+9OxYfmNfb4YbnclOiw

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:42637

Attributes
  • Install_directory

    %AppData%

  • install_file

    Chiken nugget.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Chiken nugget.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections