Overview

overview

10

Static

static

10

majang.exe

windows7-x64

10

majang.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    majang.exe

  • Size

    187KB

  • MD5

    fa3c4452407bbf7cc18b89614367b1e1

  • SHA1

    8084e7aa9909a860dd922aabe1947e433f0c21a3

  • SHA256

    40aeac0ae5fb49afae52d0db9775619d85f2885f0c717714107232ee11740df0

  • SHA512

    f0e1ab020c57085464fc3d3ab1358bb54a5a0759810ad727fa79dde42937c06c62767ba2f0a7c745a49fea916e6936dd3b55aa87f82ce3f1f65b7380aaa7d97e

  • SSDEEP

    3072:zTSL46zyhRXbCGO2+U4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvU:Hs46GhhboUgVqwlL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

210.246.215.36:5814

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    NVIDIA.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • majang.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections