Overview

overview

10

Static

static

10

348ab4b0de...cs.exe

windows7-x64

10

348ab4b0de...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    348ab4b0de840a359f226e5d83303fe0_NeikiAnalytics.exe

  • Size

    36KB

  • MD5

    348ab4b0de840a359f226e5d83303fe0

  • SHA1

    b084652d5326244b46261f8af506d9e674c7c37e

  • SHA256

    0dbc4f648001def959d0da21c1e561b6fa589906e20c9035a8830103334a48e4

  • SHA512

    4cdb220ccc5c0c715af34ab067f24af24d4cbcff6c3950bb49341e3b34c87fbf106862be257694a81cb4b96c7b570e38f7449c2a49ec1a0eba8b066a295b5bdc

  • SSDEEP

    768:n7M938RNruoEF2GnyacsCZb63QRwg0C/9bhian2:7M+vrrGypZb63QR0C/9bl2

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.19:50032

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 348ab4b0de840a359f226e5d83303fe0_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections