Overview

overview

10

Static

static

10

oxyinstaller.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    oxyinstaller.exe

  • Size

    60KB

  • MD5

    358d4967d2cc39146a87b2726b0bfd43

  • SHA1

    b3176c92a9de3e11879ae8ed765d381ac6669b14

  • SHA256

    a8ae6e738ef352cd4e70ab482109f32b6a74c2b8efa1b0a277f41969523737c9

  • SHA512

    a607a4df91f03a1a60877216e92c7f3a7e0a276d7117a89edd4a9924e43a862b7326b34b10ca98011bc63bb1183fa60ccfce664de33a175bb96c30458eb39516

  • SSDEEP

    1536:KyCAdkKegDqstEWzKb2tbpqlpOFas616OItZP:BHq61zXbMW/OItZP

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:32901

engineering-thoroughly.gl.at.ply.gg:32901
Attributes
  • Install_directory

    %AppData%

  • install_file

    OxyInstaller.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • oxyinstaller.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections