Resubmissions

General

  • Target

    LLRImgLoggerV2.exe

  • Size

    73KB

  • MD5

    0030cf5146201005b8c17fd76bdb7d2d

  • SHA1

    3e8321971e3c3341fd1d770a2830f118654737a4

  • SHA256

    cdb69e3d021f11dfc126b06b175fa1a888792fd23bc894aeee90bba53654915c

  • SHA512

    e2d51fcb7315ee36bba72b5ab1a9516248ce92aaf7f4263caefccddea7635816d631f3888ad9a2d309fd72a0508627a9be04d38b47260f865ef8946d7bb7c445

  • SSDEEP

    1536:4Vf82uCouEeXOaSjhIpdtMGcU6be7gYG3jATZKMl6qkMBUoOVzEehxIw:4VfBi3lX0MDU6be7VTwCkotOREe8w

Score
10/10

Malware Config

Extracted

Family

xworm

C2

promptylol-31420.portmap.io:31420

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    RuntimeBroker.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LLRImgLoggerV2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections