Overview

overview

10

Static

static

10

a73192efa9...cs.exe

windows7-x64

10

a73192efa9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a73192efa9195222589d66b2e229f4e5bfe6d0f5cbbc0f2a582cd74e1fcc8d78_NeikiAnalytics.exe

  • Size

    39KB

  • MD5

    3289f3423a4d15e142fe765710bf8580

  • SHA1

    155fa5b3a1e083f9175d3d8c8b2441f06eaadc17

  • SHA256

    a73192efa9195222589d66b2e229f4e5bfe6d0f5cbbc0f2a582cd74e1fcc8d78

  • SHA512

    3a09102eabaf035e78b34c9fac48362a4ca13c5b643ee799ede64eb4dbee8e918c2a51e298e9d5c03f8a45c1e692f5bf439307460107b9d8e06ffc80547b1987

  • SSDEEP

    768:n06VXEkRmv/OevQZ944KYrF0Kf9AFWP993z6dOMhdQs6MR:0uEkIXOhO00pFa93z6dOMHlhR

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

znvHMOP3GC3AYtf0

Attributes
  • Install_directory

    %AppData%

  • install_file

    Github Update.exe

  • pastebin_url

    https://pastebin.com/raw/2N4dpuHG

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a73192efa9195222589d66b2e229f4e5bfe6d0f5cbbc0f2a582cd74e1fcc8d78_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections