General

  • Target

    674846fe81cd44bbbc9ef3b6c04033bca8f7f6b34831db7b938a9c5bf5f44854

  • Size

    75KB

  • MD5

    ae1b2bbddbfa12bebef53fdbc0007b1d

  • SHA1

    2c9e1af344169409b576f14dc679f6f6ad5b6a9e

  • SHA256

    674846fe81cd44bbbc9ef3b6c04033bca8f7f6b34831db7b938a9c5bf5f44854

  • SHA512

    486c99459cbce675ac43e3e02f28d55236d54ef887ddd902538f726d8ca9f4959a5c426419affb461405fa65879764ea9359504ca9963c825b1a5ee5012df815

  • SSDEEP

    1536:TeLAHnsNUQjCkjU/Q23/IkgRObrEX8CoVapr6WOmdPSw3a:eSvk0Q23nWObYXwVaphOuS0a

Score
10/10

Malware Config

Extracted

Family

xworm

C2

45.77.143.39:9999

Attributes
  • Install_directory

    %Public%

  • install_file

    Public Setup.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 674846fe81cd44bbbc9ef3b6c04033bca8f7f6b34831db7b938a9c5bf5f44854
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections