General

  • Target

    Expensive 3.0.rar

  • Size

    42KB

  • MD5

    1880a1e846dfccf2bf07776bf0022932

  • SHA1

    05bc8cc91aa9ba6285bbda1aa77076fd5d517639

  • SHA256

    bb854ba21b58654d090e9bbdf74c2b9f6aa253cfbccb0436e00e65cc4a510d44

  • SHA512

    5ab9f51bf16b98db5ca0e95193781cb7691d2c731a8747ef5e2f9abbc8c382cbd03c6e3d1b9d1b148996661645bd9afbef3cd15a07d300c5ad9f2e80755dfa6d

  • SSDEEP

    768:tibKXwzxyPw13ZdTzYbOd9ljqsRPRMnezhNOSCnFoIFwyIInzqnnyyI:yKc4whHzXljqjnejCn+DCzhT

Score
10/10

Malware Config

Extracted

Family

xworm

C2

loss-winners.gl.at.ply.gg:61007:1567

Attributes
  • Install_directory

    %AppData%

  • install_file

    Expensive 3.1.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Expensive 3.0.rar
    .rar

    Password: 1

  • Expensive 3.0.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections