Static

static

10

Resubmissions

13/07/2024, 22:07

240713-113mma1fpb 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NPloader.exe

  • Size

    78KB

  • MD5

    a1aaeb826ffe056ff78a5dfbad5d0d93

  • SHA1

    ff1f2be468e6303c70c0abe549783cae409f0898

  • SHA256

    02c202b07d0fd8a8622c674e7366c095cc5bef0e430d41c3f4f169d0ef45ed1b

  • SHA512

    23ebdb89e4a92d132bf418c658a0240d74afb0f7bd627b42dce10d71f05d360840bab999ae0fee3d862bd1b389f535a848bf008be1d660b7ddc11c41a0c036b0

  • SSDEEP

    1536:u+dmOmnwfTyJRQHPPk85YblvxIaAYDb6WqGSLGsO/fNIsLGGdBTkm:/dAtJRyP7YblvuhiuGSLGsO3BLEm

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:15766

some-md.gl.at.ply.gg:15766
Attributes
  • Install_directory

    %ProgramData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NPloader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections