General
-
Target
Pm2N2C2ndXU2J.exe
-
Size
85KB
-
MD5
5c6fef1fff51ccb0110e57777177bc84
-
SHA1
807be583f49b7512a8e1aac11d6c2475028c7abf
-
SHA256
17edbd6b374bc695acd4f5e9e12ff27d7bca977ee06db54012388dfe7b3e5cc8
-
SHA512
02795e12e22853a506db78f2f9960fe90904605dcbadd20b97994cb8db35be2f516ce0e37a5d3509ccf4a2c581ac21b74f9facb46427bc633a061d56816a13af
-
SSDEEP
1536:EyM6UKCWBzEisHQFU5JmxdF+bGN0d/KSI6dMOk0QuNPDUz:EMBVxDUi+bGQNQOk0QYO
Score
10/10
Malware Config
Extracted
Family
xworm
C2
19.ip.gl.ply.gg:45758
ads-enabled.gl.at.ply.gg:45758
Attributes
-
Install_directory
%AppData%
-
install_file
detcvto.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Pm2N2C2ndXU2J.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections