Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    мой рат.exe

  • Size

    46KB

  • MD5

    befac16ea9fa7084453331895e4867cb

  • SHA1

    d81fd34c1f81f47ee3dab1ea46079525299f6d30

  • SHA256

    1aab009386314eb1c5852d258046d83f52c87855c18d67e63bed868213dcd09d

  • SHA512

    afacaae0934ebc86944f0264a71e38a003590a37df2ad6cb8ae4c247c0702e3a4e99e17e7f274192e1ac8a6f630a166ce95267c9af24e9f2d95557a038033843

  • SSDEEP

    768:2AO0L2u9ETy8an0Q5mH4dlNnvpzV1gFEPa96CT6tOFhQzbqC:2AOg9ERQgH4dDvp8Fd9HT6tOFe+C

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

email-champions.gl.at.ply.gg:5552

Mutex

cfpIW0khyh7GXs0K

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

  • telegram

    https://api.telegram.org/bot6814850214:AAGtrnkhUh3vMq-wH7W5cvNuSWLdcy7mtis/sendMessage?chat_id=7094837950

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • мой рат.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections