General

  • Target

    Sp00fer Crack.rar

  • Size

    20KB

  • MD5

    9f801def38ba224398717c90afba8a1a

  • SHA1

    699054d24eee73bbe23cfd5e2dc81f965114e262

  • SHA256

    15ec7a3b5c0023308b40e74a8827740ea91d468d2d7cfc3fa82f1f7248265114

  • SHA512

    c24d9f15b22da434974cef724e5796450cafbaaa9bb561e92a9160de3203f7246c71198f5f48183bfbb07e0e4067c7ecb0aa95be79c2919a9bb107b49142d14a

  • SSDEEP

    384:0Vo/koDWDnyYBU4PTpkCKsu2kFEY11R9iX4WgvWlsVQFOIzH0QZt8nIN1r0i2AtQ:0Vz2UNBU8VHfkFuI5vWliQFTzjt8m1rO

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

6.tcp.eu.ngrok.io:18743

Mutex

jKE9ZDYBRmujJC3R

Attributes
  • Install_directory

    %AppData%

  • install_file

    sp.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Sp00fer Crack.rar
    .rar
  • Sp00fer Crack.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections