General

  • Target

    Minecraft.exe

  • Size

    81KB

  • MD5

    973047db505a3921e28581161221e634

  • SHA1

    ef765175fb5e9a978c3deb806813b4ecc1a7e49a

  • SHA256

    3875ea8150fd093a2ae2d6d9faeee8b6d0d8cefbcb05e9433b937460b3ad9b2c

  • SHA512

    6d4a2f9bf70e9452a31f871a2c61af5ef8b3e3b6d5b334210d7c48cf5ed1887612be33fba263c00a57ba4b6a81a2360988e3a2d38e51ce49f1fedc8d3f876230

  • SSDEEP

    1536:XqP+N/Ud1XQNHac/G+HldbO6woeUU6C/ONxUdfJ:aWtUdiNHfG+HvbO61AONcJ

Score
10/10

Malware Config

Extracted

Family

xworm

C2

additional-linux.gl.at.ply.gg:26447

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Minecraft.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections