General

  • Target

    bebra.exe

  • Size

    74KB

  • MD5

    669e9e7f8c7290ffda453a62f14ca030

  • SHA1

    4eabe1cb31a0c2ed609fcdef7a5d2ca0bfff328c

  • SHA256

    58b0a1a32bd96f09ac520b8a7433cc86f0ac5c3fa1df4741dd8b2bd12713f749

  • SHA512

    bbc310297435462479a6035e0522ce3da55bac7ca2b1fd77825a798b70f84edb4402405b25cfb33d0dad808570f6b1dab88f7699d0d4777a97465d8183075655

  • SSDEEP

    1536:BKru/Ft/VKQWRdx0zaYEeqbGxkwfTlk6QUGH+meODiDDO1:UrWF1MpAEeqbG6IywmeOWDi1

Score
10/10

Malware Config

Extracted

Family

xworm

C2

consider-catalog.gl.at.ply.gg:61770

Attributes
  • Install_directory

    %AppData%

  • install_file

    bebra.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bebra.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections