Overview

overview

10

Static

static

10

Microsoft ...on.exe

windows7-x64

10

Microsoft ...on.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Чит на шахту.rar

  • Size

    46KB

  • MD5

    ef013187ccdd1fcb7f91cbc0e3fe911b

  • SHA1

    59e24bf5d4f3b519d94caa74c94d86fbe76d5e68

  • SHA256

    5caee4d3f535a1fd9f46149a69380c67b0d71af7bb4f3aedc9bd1860f5e8bca8

  • SHA512

    c94116a7ba86744c9a01829141e31eefe40d09134e81b99481651d16d9c8b1285701297a6744c20403d6703d0c2bffac561e3a170a03e3cf0b76e06111e85b2f

  • SSDEEP

    768:KRIUDpEtiahBExkt8WPAaip0VV7ObxS5FhefY8aVB+D0ul7WJ:KSyi6kyaip8ObKhef5a+lk

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

listing-trackbacks.gl.at.ply.gg:15337

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Чит на шахту.rar
    .rar

    Password: 123

  • Microsoft Network Realtime inspection.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections