Overview

overview

10

Static

static

10

addjia.exe

windows7-x64

10

addjia.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    addjia.exe

  • Size

    131KB

  • MD5

    13f5509cc976ca6bf7e356cd97e59930

  • SHA1

    57f4a5f33acfc85222d64f09deb7e484fedf6031

  • SHA256

    98e37c54395638e55272bb855d6584421a89cc5adcfcd42705fcfd631d87c8b7

  • SHA512

    2a37131219e65af60eb40fa4eb9d31780f89986b6e3607afa4251a270d7d4d3ee130cdd61782a3c4d4ce58d249fe80086337310f6262c22961c5f4c017994ccd

  • SSDEEP

    1536:TGcqt0N532jnykzRB6Z1TDQ+kHzYyyr+b9uKjdZWRMGOf5nCL5A6kn4BF0K1:LRnG1grDQNdk+b9vdZwOxnM5fX1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:6969

185.112.83.240:6969
Attributes
  • Install_directory

    %Userprofile%

  • install_file

    File.exe

  • telegram

    https://api.telegram.org/bot7395249390:AAG-TffK498OCpe-lwXNmsF8jEZ_uuhoqNw

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • addjia.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections