General

  • Target

    Everything.exe

  • Size

    110KB

  • MD5

    f47e703a036f97fb0808be65fea8b843

  • SHA1

    cbb744d544dcbcb56e92207b4551eaae93488b29

  • SHA256

    0108ad9432637bc7b376a83a642ebee1b85fe35f3aaac95059b1497944db3b75

  • SHA512

    a26af7764fa51b6d3f1efe0aaf1484d21cbc15e39e40b6ce51390e6f3baa7dd776700a05e32e0e82ea6f8cbe9b7255089825a5b203dbf4d7f7ad5e7c2d85d38a

  • SSDEEP

    3072:V9+XCs+uI+bdbs/PpH9OIOq31mgjio+Saw9VEl9:V9ECsBb1sZCq31mgjilbyi

Score
10/10

Malware Config

Extracted

Family

xworm

C2

connection-elect.gl.at.ply.gg:37777

Attributes
  • Install_directory

    %AppData%

  • install_file

    Everything.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Everything.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections