General

  • Target

    Test.exe

  • Size

    73KB

  • MD5

    f9cf3c741b2aab438659db28ff3dcade

  • SHA1

    abea5f0af31f38d2df86735b0ac57a508eb36b68

  • SHA256

    b7f8446df81a5d91809436661acf8ee4fdd1c897312a494ca01fca94f5352d5b

  • SHA512

    ff86f97a2bb44b001367655afcbb33b928c07a5ec7ce0c9449d9997c4f2b0550363c5bbc8f0a3615dc7cd6aa9f04d018b81c1e98338575bed0910a20fcd9a6eb

  • SSDEEP

    1536:QMPdJZvt2/1GwAh5MiVb3is7oM06gOh5dLL:QY/ZvtoQ5Mwb377IOhTL

Score
10/10

Malware Config

Extracted

Family

xworm

C2

edition-ages.gl.at.ply.gg:14076

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections