General

  • Target

    loader.exe

  • Size

    2.3MB

  • MD5

    90fa39143a3e523c9c504b510963e5f6

  • SHA1

    afbc171716e0a9cb4f0cbca74d39c0bfe07ea31c

  • SHA256

    5dfe71156c3af718d81f3e80598c74527d4b309ce49978e09f49a1bc4634e955

  • SHA512

    ee50f440851de275b0ae98e0e7e4b1c83f02a6baf36a41829e4d912c9d59ba3e12bd7887dc39cc2716a621c9e1e3b9272352a4f01d225087e796ef082f8ee977

  • SSDEEP

    1536:4Zv3gg7myOcoddp8cM54G9dvHeSkb0Hx/X6J6OWum:4BHUpidHkb0R/86OWum

Score
10/10

Malware Config

Extracted

Family

xworm

C2

17.ip.gl.ply.gg:23883

Attributes
  • Install_directory

    %AppData%

  • install_file

    h6G5j8.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections