Overview

overview

10

Static

static

10

rizzler.exe

windows7-x64

10

rizzler.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    rizzler.exe

  • Size

    75KB

  • MD5

    72b43679f0617f3d2c9e35858c2800f2

  • SHA1

    b3627958dfd816b62f1c43bf69925fab4879b32a

  • SHA256

    f9e90c25eb280f50c7d3bcb13af887afddbf5d41f6beddc5f78066a5614334e1

  • SHA512

    a9ea3db63435947d9e5ca90ae75cbf415ef56028900b34439ad670b4351e9597e96727612960d0a8fa0550ba0c42e3476194ab2f359540fea47abdaf942d7893

  • SSDEEP

    1536:UG7GG+6+HYCzqIxj4ppImmYoh+b2M9Faxpjp78U7OFzOMGC3:UGBP+HqIxszIfYoh+b257Z8WOFzHL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

uk2.localto.net:45843

Attributes
  • Install_directory

    %AppData%

  • install_file

    Google.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rizzler.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections