Resubmissions

28/06/2024, 23:31

240628-3h127averg 10

28/06/2024, 16:19

240628-tssdcsweqa 10

General

  • Target

    nigger.exe

  • Size

    59KB

  • MD5

    d6e2cb30e0f2262a1bbb73e6eae2eeed

  • SHA1

    89131a5014f50474ca87dea770cbfa4e183a4922

  • SHA256

    9620d0fc6e70716cfea243bdeae0273c32e8c90c1b16130b958cd103c535539c

  • SHA512

    2d93a5dc4e6ee80ada16487cabaf0c7941393dcd593157230f4429fd6069014942c5956704aa13127c5949b7e4c64adcd566cc90b141b37939deb3c71f547a1e

  • SSDEEP

    1536:fVugPfJoAXQX7Y3UIUmbEOz8hoq7K6QzOPLHFBTJ:fVAAYYEIUmbEOgh98zOjlxJ

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    dllhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nigger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections