Overview

overview

10

Static

static

10

ragun.exe

windows7-x64

10

ragun.exe

windows10-2004-x64

10

Resubmissions

15/07/2024, 18:25

240715-w21r7swcrc 10

15/07/2024, 18:08

240715-wq1ytsvgrd 10

15/07/2024, 17:59

240715-wkvjvsvera 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ragun.exe

  • Size

    86KB

  • MD5

    10396c1ae662804bc5867311a1c5db8c

  • SHA1

    8c3872b7604d06551fc8d1eb54dc5a7356b6b2bd

  • SHA256

    37e432eddd7da73901896816d11de82363a272525013474cbc426381d3c7a494

  • SHA512

    187da9dec6a5be0c039b62ff223ea2ef4d0b49331a25a23aaa0e7390e92370bd5fdd7f14c1ee2505999b9a962552f5bb050a650f49918fc4296bb7d978dc9d85

  • SSDEEP

    1536:wm2BU1IjvIhMD00JZF1d0ZixwbaJyJ2+K+Hf6luhwOy8VkNdCy:Y5Sr0TF7+baJN+KE7COy8Smy

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

edition-ages.gl.at.ply.gg:14076

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ragun.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections