Overview

overview

10

Static

static

10

Ulg Bypas.exe

windows7-x64

10

Ulg Bypas.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ulg Bypas.exe

  • Size

    121KB

  • MD5

    5ad0a139daa10def6783d34a578882eb

  • SHA1

    8cbeb48832356f7cff9b1370ece879d72b8eb156

  • SHA256

    a788a5b401661ff1c3eedd21d679ccaf39a35cb1a5a814773b1e4ded48de890c

  • SHA512

    2cbd28e71e57b1fa051231565074afeaaacb6332c831e861be45e98eab1d1f1fc0519ddbace3f2f2f24d9a97d8dd767bcfadd827dfb81e960bcc7b73cb5b3b84

  • SSDEEP

    1536:S0DwewicrbsN/YVRrNRF49IG6iOwjaClJEHIl7pmhaKI:S0DweDN/kr/F49IaOw5Ch0

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

sekoneko.zapto.org:1111

Mutex

epkUNO9aHruE9KEn

Attributes
  • Install_directory

    %AppData%

  • install_file

    win64.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Ulg Bypas.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections