Overview

overview

10

Static

static

10

PornoK1d.exe

android-9-x86

PornoK1d.exe

android-10-x64

PornoK1d.exe

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PornoK1d.exe

  • Size

    150KB

  • MD5

    bfe2ce9a03e202907315519a601ec49c

  • SHA1

    6c5b3c5d0628a5f59cad599ff5a5284a3ce9ef27

  • SHA256

    f23d6c7169a3df4e47c6773884b98507e145ac38ca007aed55e45b72565b9dba

  • SHA512

    aec9ab17e52479cbe594a4318f3ed5b6480610a1a827ffb8e29d8a43cb5538ea36997bc5b5dde51a25483bbbd74bed075fad58c6602226279ee647ba08efecee

  • SSDEEP

    3072:ek2csT/8rJFf9HxOMo4NpVq8BxFRzaqF+o2GQJ7/JzqVfGv1:eDT/uf9QgVqwlL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

york-latinas.gl.at.ply.gg:51154

Mutex

bhDm93QvQg6Pocut

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • PornoK1d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections