General

  • Target

    Eclipse.exe

  • Size

    54KB

  • MD5

    96e449cf73dc93bceef015fda153a2dc

  • SHA1

    d03135ce3b6572252d067eef799dca086465eaf1

  • SHA256

    a7f3f72f65eae104c42bd8df5f0c7c06c4a3df0740f33ef6ffbeba34ded714f7

  • SHA512

    6717c785ba1515032256580b8bfa8d07cf8a0408889d525f6fd7c985f5be4de3a3b05182f6aafdd60fb1bd1e16887dc080fb3f96ba555ba3a1d21d99ecced18a

  • SSDEEP

    1536:UIfRubg30SyJVYiQlGJL4+bYIJ3+OPu8HPb9H8dvc:Uiubg3gxQAq+bYJOPPb9H85c

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:1604

follow-registration.gl.at.ply.gg:1604

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Eclipse.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections