General

  • Target

    yipee.exe

  • Size

    78KB

  • MD5

    030037485599a8197de56d8b1f90abbf

  • SHA1

    c18778bed57602597ecd3fa33f883814390c604b

  • SHA256

    8643f43d5d10810cc9bbdd3cfe236e2f786145de06b9616b2459667a614aea14

  • SHA512

    417c92a0dc1f5c6748bee85dca4f3adb7a4d38c4f21d18f5022e75c698bcac0b39c09a68a6d4a9331efd8279d74a81d4867821883a65bb3f2886d9fa751baa0b

  • SSDEEP

    1536:euZfflDaLMbt1vtvimayBEbdTBNfboS7o6q5dedNO+41Q9MXItp5a:hHl+I7liWBEbdTDUS7bdNOAMXga

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    dllhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • yipee.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections