Overview

overview

10

Static

static

10

8d582279b5...cs.exe

windows7-x64

10

8d582279b5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d582279b551f8a6348c45410fff73e0_NeikiAnalytics.exe

  • Size

    31KB

  • MD5

    8d582279b551f8a6348c45410fff73e0

  • SHA1

    10244d856cae5095c16a3f1fd14bd84e5bc52cdd

  • SHA256

    b9c0b23ad7bc8b077202ea84b40a222dafa3f7e14301ad5986d0f06eb3eed232

  • SHA512

    1ddb9744f034f10e84b2da515b90b5ba7e65649cfad259ebc38edd19cd4b800177d8374779a3127d189ecca162fde2bc5268daf0e95c5d3c6e0e53ee15c6a1e1

  • SSDEEP

    384:UuTNqCr4TOXqMkc7qiPRr49hL5zwDs2ETIiJ5R+gtFqBLTiZw/WNCvK9IkVuhfxT:1k2lUD5EePJ5ZFr9RgOjhn/3vK

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

astaaa.ddnsfree.com:1177

Mutex

WtJQOp11bCLfrAjG

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8d582279b551f8a6348c45410fff73e0_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections