Resubmissions

23-07-2024 16:29

240723-tzcw9ayfrn 10

23-07-2024 16:26

240723-txm97s1hnf 10

23-07-2024 16:20

240723-ts2l2a1gjh 10

23-07-2024 16:15

240723-tqjnfa1fmc 10

23-07-2024 16:11

240723-tmz61s1ena 10

23-07-2024 15:54

240723-tclwms1blb 10

23-07-2024 15:48

240723-s8v9hsxfmr 10

23-07-2024 15:45

240723-s683lazhmg 10

23-07-2024 15:10

240723-skb6qsyhnf 10

23-07-2024 14:52

240723-r841zswapq 10

General

  • Target

    писька чит.exe

  • Size

    71KB

  • MD5

    ed3794861ddc34b4748ff8081e80cb2b

  • SHA1

    e63cf084552f0c2803de0109e3d2fcd3102c4738

  • SHA256

    6af19a694c8c3e6860d2555ce16be115c599c3424ec1e01c0bf67acd3298ae0f

  • SHA512

    df771b8eecb7e065628c06b8cca9aa7df6dd05bbdba0f85ed34010e264a286a17129289d6ac3e9f87c56152ed7a35302e88ae6643a1bb06c45745cf3d5ea0b03

  • SSDEEP

    1536:EYB+O1NIBlJ4wlA0B4GI0b0xEPdB8QlOrIXt6fT+S1va+OuPyGV54:EOgQwlRB4wb0xEFBdMIk+S19OuaGV54

Score
10/10

Malware Config

Extracted

Family

xworm

C2

main-although.gl.at.ply.gg:30970

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • писька чит.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections