General
-
Target
1335260b0ae60b406d24e124b652d9ad3b2b6f6c2cfeff61cc1d27759c85de77
-
Size
39KB
-
MD5
0c9ab9578d6d9cd19dd75473e62eb818
-
SHA1
f667922f8b4f6f7f06fd2df5755c2640b0f74a58
-
SHA256
1335260b0ae60b406d24e124b652d9ad3b2b6f6c2cfeff61cc1d27759c85de77
-
SHA512
c0eed69b7ef899ee99f6aee8f108c636594f6895af4f9ceb488d49fad405df5f4b03788d44346c4680f5060cd6b394576bf28909cc556cb4b3fa98449bbc26dd
-
SSDEEP
768:fLFUSM+46wSeLJKuuwhSly8NfFWPa9fV6POwhtaibGN:fxUSM+tbgJKuuwhS00Fv9fV6POwbjW
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
august-gather.gl.at.ply.gg:59174
Mutex
9r7qkaqP80zwxKVX
Attributes
-
Install_directory
%AppData%
-
install_file
CelestialCrack.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1335260b0ae60b406d24e124b652d9ad3b2b6f6c2cfeff61cc1d27759c85de77
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections