Overview

overview

10

Static

static

10

FACEIT-set...st.exe

windows10-1703-x64

10

FACEIT-set...st.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    FACEIT-setup-latest.exe

  • Size

    40KB

  • MD5

    d604912be16c410a263d94644fea5586

  • SHA1

    b0685b90c2620e975d8e17560fa6aa056591cd04

  • SHA256

    7502201c4b437ad14cfa2113f0dc9c49063fe4ae107ddc6484bcb77c822706ac

  • SHA512

    41b903b4bde779594a86f177d528cbc5995272ba97998e8ee1e540c716075b46451cac1a09048b2a74ad57af40ddb22dd0374cb4ff8725d27ecf84d76c1c5666

  • SSDEEP

    768:gPDWCCqClY9UiX/ilrEvr0GXFyc9Bji6OO/hNDQnlxky:gPDWPleUgilrezF39xi6OO/ylx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

tool-seven.gl.at.ply.gg:52445

Mutex

A8w4wJ9i7l4J7HTM

Attributes
  • Install_directory

    %AppData%

  • install_file

    Start.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FACEIT-setup-latest.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections