Overview

overview

10

Static

static

10

WaveBootstrapper.exe

windows7-x64

10

WaveBootstrapper.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WaveBootstrapper.exe

  • Size

    35KB

  • MD5

    da4409f90946c90d641df77659740b91

  • SHA1

    b549b832c4ea720728cd0cac8ff8215a5449f8b5

  • SHA256

    f75b5ccf024c6b5864cb895eaca2752655c7efd8a4166f37c3cce78cd1eefe5f

  • SHA512

    8da081317453308066a3f0c0ef4d47f8aae31592cc7a756e063a92e4f3c74e551698e110b139e2e2632de1eb3b995cf7d2056ef177f8fa8bb7a2f3833b35a6a6

  • SSDEEP

    768:PIiiy23/1RExoMvEiW8KVFyw9z61O/hry0:Pk3t0E78AFr9z61O/dt

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

later-employers.gl.at.ply.gg:4967

Mutex

1v70baxZofSbJNv2

Attributes
  • Install_directory

    %AppData%

  • install_file

    Windows.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WaveBootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections