Overview

overview

10

Static

static

10

зщргн.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    зщргн.exe

  • Size

    73KB

  • MD5

    8291a53c7d9c369912d2c714be67603e

  • SHA1

    053234b1d494dc649b8f5f4cf6156982a17e49ac

  • SHA256

    c37297af8c5299f71a71c58a1cfe4d140fd4ad1ff0364b2fc32bbfcddc7e82bd

  • SHA512

    ae8c8e51ab034e288e4c54ccad87e94df4ccfda8b3c2c0d0cae91a551dd03b36af8052b41f05b986540c2b876a2fedebcce823df27699e9bf57b4ef9143a9881

  • SSDEEP

    1536:whLoE8D8yxusAhRNS6DOxQa+bEcDC1q7b63zko3OkrH+uZ:wZ/8D1VA9cxZ+bvDkq7Uzko3Ok6E

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

however-medline.gl.at.ply.gg:52994

Attributes
  • Install_directory

    %Public%

  • install_file

    ctfmon.exe

  • telegram

    https://api.telegram.org/bot7067634449:AAF0NP8pLUuUUqu5CaQZAWEDm2_eg6PwA7w/sendMessage?chat_id=6912834371

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • зщргн.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections