Overview

overview

10

Static

static

10

CP-Downloader.exe

windows7-x64

10

CP-Downloader.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    CP-Downloader.exe

  • Size

    88KB

  • MD5

    a07a1e0d567e189fb8ab7768fb990edd

  • SHA1

    d769f103bd62804ceb5bbfed62805b614bb54dfa

  • SHA256

    f61ac033cfb1c4b10f3e420d3278a5ff0d3c96be8ec85ba2f7ca62b0d2119231

  • SHA512

    f404a30804f8bbaf70332668f943306f7b312a26149af140a88be4fe6afab571965038c4e798d9a0e4b4fdda19b6f41c3157f3d0c6474e1ebb858c4836cc2291

  • SSDEEP

    1536:mNctIYdZS0jh8Dn7vZftWcaDfnwjb3HtSxa/6NLfFkxOEVQSc0IdQidS1EAd8II1:mye97vZGLab3kMOaHc0ZOgEA6II1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

edition-ages.gl.at.ply.gg:14076

Attributes
  • Install_directory

    %AppData%

  • install_file

    CP-Downloader.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CP-Downloader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections