Overview

overview

10

Static

static

10

nebula-installer.exe

windows7-x64

10

nebula-installer.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    nebula-installer.exe

  • Size

    166KB

  • MD5

    25809b25c434d211876fccf07607b956

  • SHA1

    9f678d0fc368876123cf883308cce52bdaf7055c

  • SHA256

    40119bc260bd833c80789fa1232be6188f2318a403a0573a8cd2d1c830c33f83

  • SHA512

    d3bf758f4102ad783accc9a2dcf7c2369003baa0b27aa5ff3bf0dc16d8b363dfbe987ab97ee959ff42513921781c18067f7886ce4c64ead14e11bb23cd8b8443

  • SSDEEP

    3072:VcCy1ouq+zywbCCbryODJ04B6ldNorXIstELleEgBOp:VcC70ywbfb7S93oDnFE

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

edition-ages.gl.at.ply.gg:14076

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nebula-installer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections