Overview

overview

10

Static

static

10

oxyinstaller.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    oxyinstaller.exe

  • Size

    325KB

  • MD5

    f65b6e70becdeafa363cd101646a0602

  • SHA1

    1c6ebde3a18aa9ba02202e8ef4139f6c8bbf0c68

  • SHA256

    e304be47ba6bd5a80284e6750f4c97181134e9daa0f581c8c47a665084e49555

  • SHA512

    409601c4f5f8c4856d77aded96d466f3f9f057bf1edd635de8db42a946478aed467145249bdc6243d2df0172007b76345550b937d8191c403806ce0a755f21fd

  • SSDEEP

    6144:NLpNZvbFRnUALl5zEQdJuUPGQs/i1c725:NLbZRRnUodJuUP+a1Y25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:32901

engineering-thoroughly.gl.at.ply.gg:32901
Attributes
  • Install_directory

    %AppData%

  • install_file

    OxyInstaller.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • oxyinstaller.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections