Overview

overview

10

Static

static

10

XWorm V5.6...ls.exe

windows10-1703-x64

XWorm V5.6...ls.exe

windows10-2004-x64

XWorm V5.6...ls.exe

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    XWorm V5.6 SRC LEAKED‮nls.msi

  • Size

    2.8MB

  • MD5

    0f911509d96f2d5a0a303485390354f5

  • SHA1

    0c6b03c638a6cdb5710616ce6291cccb9086577a

  • SHA256

    faf680e186cd40cc01e630c5cb443659d0ff304ad1e112090c1f9381c4309892

  • SHA512

    0a374ed54f529116405f1dd24675778244a4f42e4e2aec8375551b15548aff19a145c9993fc0d2c07e85a061b70ab0cba13516a01157c8e32487097128c76ecc

  • SSDEEP

    49152:uqA3j+t76ztzFasTyrgcN51q/myDq/WBwrHJQMLSAI7aow89:uq/tstzMsTy0cjqJ+6wzLNIzwg

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XWorm V5.6 SRC LEAKED‮nls.msi
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections