General
-
Target
8a76f4b2e67675ced5ce4b8e1085796b8d32cd76c6fe16e72d6ea975fbb32f87.exe
-
Size
58KB
-
MD5
7dda8c4e9ac5fe4603e4674c31f9c8bb
-
SHA1
376a3e2d6210437fa4b6976042f0cd376b0762cc
-
SHA256
8a76f4b2e67675ced5ce4b8e1085796b8d32cd76c6fe16e72d6ea975fbb32f87
-
SHA512
39fd6a393dd0fbcb89e196402d40eabf833a339fdaafba0c6ecf524def475c688da72c2e2dd79bc15f984c54b3c7b25a6b7ac934427ddf3f3e4a5d23838cee06
-
SSDEEP
1536:xKpR8CbZ8H0xIIz0FUbW5s3xWukSmcgqgO4WY:qR8CVfKkkIBgOG
Score
10/10
Malware Config
Extracted
Family
xworm
C2
127.0.0.1:9049
Mutex
SL57K2DH9E4FcEeR
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8a76f4b2e67675ced5ce4b8e1085796b8d32cd76c6fe16e72d6ea975fbb32f87.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections