Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ЛАУНЧЕР БЕСПЛАТНОГО ТАРИФА.exe

  • Size

    61KB

  • MD5

    20b75587546e63a596d661994b0ce7cb

  • SHA1

    ef3da657ae59fcda0c6cca68e3c16c5e34a5bb32

  • SHA256

    64cfe3e9b3be4331df35800d31aec21a74bb00b8c7ecb2a9e72cff576cdef343

  • SHA512

    e9954c626bf620d8564df35706f36c3747beff63106d09d30b1871a40b162e2b1abbf1ee38631a028bec58830aab6f8cb9283223dd015bc149c01025566214fd

  • SSDEEP

    1536:4TIpvDvtnbfgMKHMOublAQZCDpk6rOBepXZY:CEvtrgMKHxublaDzOwppY

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:62559

19.ip.gl.ply.gg:62559
Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ЛАУНЧЕР БЕСПЛАТНОГО ТАРИФА.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections