General

  • Target

    e64ee61ffcd0633ea5aa350e908dcdbaa849b0119d730e8b2b78305715eb5a05

  • Size

    68KB

  • MD5

    fb813fd6006cd35af7b41bbafcdeb42c

  • SHA1

    6723f6d3aae0be21057b79c92b717ff429dbe5bf

  • SHA256

    e64ee61ffcd0633ea5aa350e908dcdbaa849b0119d730e8b2b78305715eb5a05

  • SHA512

    b6dc4ef713b3119950ca8fca1766e41ea68b4b4970bc87e82540ee94b394c394bce9f1040d1666eb57a27364b62c51a369ec3086df7b50792593eff9f3a73b11

  • SSDEEP

    1536:CFbh0GyMDh5SocMx8GbOEyj3tyww6p6MxofOBUhAw:CFbuMDfSoHjbOrEeyOeuw

Score
10/10

Malware Config

Extracted

Family

xworm

C2

20.ip.gl.ply.gg:57403

Attributes
  • Install_directory

    %Temp%

  • install_file

    Windows.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e64ee61ffcd0633ea5aa350e908dcdbaa849b0119d730e8b2b78305715eb5a05
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections