Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    RobloxExecutorV2.exe

  • Size

    78KB

  • MD5

    550734e484de53b0cd04227341b78f7b

  • SHA1

    30212183800f6c72839c40a7e0c3c3506323d6e1

  • SHA256

    d25263bb56bed483c3afa53e7160d6d36f1e6d6b2d480fc47c5c83d873b32e28

  • SHA512

    a67b3ad5f365f5a7758f80d98ef2294f3363fad326296d1761e2ceff28d0fdb32d1d04de8cb397938aa717716a190f3c11447016ab41cfabdebbd88f76ce783a

  • SSDEEP

    1536:8AEk6flxoDpXAF6fSJb4MycWsA6T2OAv42g+cc:7ELA1XAF6f6bjf2OW42g+cc

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

212.132.117.91:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RobloxExecutorV2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections