Overview

overview

10

Static

static

10

Neverlose.exe

windows7-x64

10

Neverlose.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Neverlose.exe

  • Size

    51KB

  • MD5

    a8335242bd544f88b10a863793562294

  • SHA1

    0ff5a8a64db5cdb00a1bff1e424b47a228467707

  • SHA256

    47f1ed6939aaa53c7a01fd4dbd32c1687a1be06326b3330cc84a4f06709660e7

  • SHA512

    41ffaed216a86fce3b684bad0d643c80e2103f1d07d31be28860668dcd08a628afdff5602253640eb0884721f12d6990e0e8ded84e567fd68389c733aec63d34

  • SSDEEP

    1536:HNgDCck6e9xregOAbKAj1g6hbgUOxoZ6:HwS0AbKK3bgUOxoZ6

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

condition-spell.gl.at.ply.gg:23784

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Neverlose.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections