General
-
Target
javaw.exe Java(TM) Platform SE binary.exe
-
Size
66KB
-
MD5
52409e4dbf9ed75c7fd6fbb4e7b1593c
-
SHA1
b2124798396292059c64fcb5e3d40a742ea66f0b
-
SHA256
8c63a9bbb49745a61fbf450e78485966222810403844af067f43046092b02112
-
SHA512
b72e769ced2813f5c93731e9c96bdafeb7359c9aa2b23fe9cb8bea675e1c2fcb2a7208b21bf0fc73d8255ee73bb732aea58ff7ff3a14c7727425947fa3f5c1a7
-
SSDEEP
1536:n61arE0YH/pS9OqgM6J0yJbjwe0qsYJcp66/O8J5:8iETfI9OA6J/bML9O8D
Score
10/10
Malware Config
Extracted
Family
xworm
C2
lesbian-organ.gl.at.ply.gg:38343
Attributes
-
Install_directory
%LocalAppData%
-
install_file
javaw.exe Java(TM) Platform SE binary.exe
-
telegram
https://api.telegram.org/bot7026469441:AAEt3_GfOceSfMaQnCWR3hwEjHcRpqL852Q/sendMessage?chat_id=1434801883
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
javaw.exe Java(TM) Platform SE binary.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections