General

  • Target

    45c1fa0a9db3a5d9e6234bac0b8b57a0N.exe

  • Size

    75KB

  • MD5

    45c1fa0a9db3a5d9e6234bac0b8b57a0

  • SHA1

    d7239d203f4a6bdeb7a7f9b95be2af6ec7b914fa

  • SHA256

    0ea01e182babf36dee5e9dadb3f8949e09e4869eb3579e44e493e74a399062be

  • SHA512

    e45e0f87e8797939de08452a9c191cbabea8046c2d561096af196e88b1c97e1c71250360ed4c13624b2aebb910144c36487fc3365c1b4f7bdb615051764e5a8e

  • SSDEEP

    1536:olFN6eV7oQ7u8UbgkjvUImbtYgtwqHQ6jrHUoOAteOi:olFEeV71U7Nmbtrwa0oOAt6

Score
10/10

Malware Config

Extracted

Family

xworm

C2

amount-acceptance.gl.at.ply.gg:7420

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 45c1fa0a9db3a5d9e6234bac0b8b57a0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections