Overview

overview

10

Static

static

10

MyCode.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MyCode.exe

  • Size

    39KB

  • MD5

    70289b7819fa6c4843f3dbf868f89f48

  • SHA1

    2f7a6cd6e8ad0ca190acaf7ccf613183044a0587

  • SHA256

    ebfcca4ca03a8a89a73501632e23383d274a8cea686bed4359153d863652dd2e

  • SHA512

    cea9a878a1e109e80d2e2493d5bd2ac062a89987b67305b4dd3dff2b06f57c6b2a4f80d8be965276e85101a1d36df071c5e9add4940e18a2ae3d454b245210e4

  • SSDEEP

    768:BPv2tlOzFKuGCuuJ/5c/lpfFWPJ92yF6dOMhHjhC:BGroIrCuuJefFe92W6dOMFA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:24920

6.tcp.eu.ngrok.io:24920

4.tcp.eu.ngrok.io:24920

5.tcp.eu.ngrok.io:24920

0.tcp.eu.ngrok.io:24920

20.ip.gl.ply.gg:24920
Mutex

qp0SiG21yxPKVpTy

Attributes
  • Install_directory

    %AppData%

  • install_file

    Upgrade.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MyCode.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections