General

  • Target

    Setup.exe

  • Size

    136KB

  • MD5

    2490778321cefd83508ba9786b66c217

  • SHA1

    aa968d4fed3451a2fff03208e2815a5f342db167

  • SHA256

    989c54ab290e147aba6de1e542eb71cdbc50179dffc190ca46031ce8f18a6c8b

  • SHA512

    b5f46764e5d4ddb9eeb783f96356eabc9c5590abf36ee4554fd3bf1118220a9d24d78ef8d1187fa69505b0dc857606c81d2ce852ae74a59a883742ad551e5553

  • SSDEEP

    3072:cpOFIFK9WFOM3Bz65/M6If+3Js+3JFkKeTni:co0K9YxBt25

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:65129

0.tcp.eu.ngrok.io:18780:65129

0.tcp.eu.ngrok.io:65129

kitchen-minds.gl.at.ply.gg:65129

Mutex

Xr8BqboocnOuliE1

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

aes.plain
1
e+ZYPZx9JPvxpgtoo1X8fQ==

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Setup.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.