Overview

overview

10

Static

static

10

fatality_update.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fatality_update.exe

  • Size

    360KB

  • MD5

    b855a6c75cc5113e964f1e3624011c79

  • SHA1

    75308aefc5b1e76780a731e4583034b3004194c0

  • SHA256

    d53f8dd0b978c07d49a845bb3e346e3876852ef1b5b7b054d8aceccdf1be9ed8

  • SHA512

    f35bac890ed845e9f2d61d6065f314f22fe41b256eb4886df1dcf2c8145f065317dafa1ad2fe6350d4a0230ba9c65a1f9ae88932a9f717253c7fe6e1f8878078

  • SSDEEP

    3072:9B65y/QJuj3Uknbd7bacwxC8QKOF2ll1JTBQWu5qn:9g5yGgb5baJQq7JD

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

  • pastebin_url

    https://pastebin.com/raw/twgbSw0m

  • telegram

    https://api.telegram.org/bot6413496155:AAGr-FYOAqVHAEbPRlCA422wJyIIvY6fQYo/sendMessage?chat_id=802224308

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fatality_update.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections