General

  • Target

    dsda.exe

  • Size

    88KB

  • MD5

    186b3f0e1c7a379a8fafe532e87f8ae5

  • SHA1

    ccc694581c8403a674514c1c5389b578ed97618e

  • SHA256

    6e48f015f18925f32834e40226ae33b2027a7b334ce39291cb7997fd4dc3e8ef

  • SHA512

    c7d54525a5f405a36f1d6afd44d5cddeb7519af0c77eae8ab67f6e94636aa12d1a827049606ead9a162b38419cb130df7d5c05da6333b22120840787db7fe753

  • SSDEEP

    1536:UqsUJ3b+zd6d4r76jEXj4Qt/dpSjMEwbhXCbZKJbP2ml67Lo2pObuaRRd2H:UqpFAcdC6jW4OzPbhXwGzJULNObuaRWH

Score
10/10

Malware Config

Extracted

Family

xworm

C2

some-pricing.gl.at.ply.gg:1590

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dsda.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections