General

  • Target

    HumanFallFlat.exe

  • Size

    41KB

  • MD5

    c4394bf3717b0e2de04bb8b1868d6339

  • SHA1

    79a3855e272ad1e532294c0fa680e4560de4ed85

  • SHA256

    25e22e12c81c26c2984ec3568dabffa5f176428527079a5761706eff1006e74c

  • SHA512

    a2c7168f8a43da2635e4ea3bbc1338c84fed0289b942326a2664bfb01534b7cb620e51caf52e8abcf760a8698633a439eba56b0134cf691295823427c1471d4d

  • SSDEEP

    768:EnYoD/rMRbLOAGIeA0ol5tdxTUbGsF5PG9WbOwhW35uC:mTIjGIxtlbwlFI9WbOwQoC

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

kT8jceY37ip0jO3P

Attributes
  • Install_directory

    %AppData%

  • install_file

    HumanFallFlat.exe

  • pastebin_url

    https://pastebin.com/raw/cLi4Nvx0

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HumanFallFlat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections