General

  • Target

    Rice Loader v2(NEW).exe

  • Size

    66KB

  • MD5

    f219a6827504a587af4c1ff95b314a8a

  • SHA1

    a451b3848b31f7e1c696852b73b61d33e5327c2a

  • SHA256

    753ab79356a3824b7196bd82bd968749bb3e9cad20423e00a9e5391ee5cb23ed

  • SHA512

    94eae07d6c2ed8d500ef8e5b646d2963caad3540268f9d37666e2c3c648df3b7d61db1550358775e227618ab7b3be087c2b6431ddc851d5437e362b9c1f3e11e

  • SSDEEP

    1536:ZNCBojiFm1a+On77FVS3xwubijtXKGOaf6IxMOn3pDGfGq:ZND6TS3Bbiji+MOnZD3q

Score
10/10

Malware Config

Extracted

Family

xworm

C2

offer-motorcycle.gl.at.ply.gg:2392

Attributes
  • Install_directory

    %Temp%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Rice Loader v2(NEW).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections