General

  • Target

    ScorpionV1.exe

  • Size

    130KB

  • MD5

    22436e73b4fb17286e88f106b4c81e1b

  • SHA1

    cc67e5fd34b3d60fd88b024b7777fc8276531366

  • SHA256

    b139690e3255462e5f96a6b61905d450885fcd27742d20130859c482d4ddaa8e

  • SHA512

    7aec1ac92db38f9cb87a55807847cbe48fce26f6471a6e4a21348a7e8383cf73afe8a024a74b1feab85ec5853b5035aa948365578b10e5c4cbd2971b6a057368

  • SSDEEP

    1536:VB5oUY/l7sl62MGCQbkvbwWL2HtuGu64SyLOIXtr0QAsGkK23y:DlilT6CIkvbwW+QLOIXR0QAsGkK23y

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

192.168.1.78:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    Scorpion.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ScorpionV1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections