Overview

overview

10

Static

static

10

rat.exe

windows7-x64

10

rat.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    rat.exe

  • Size

    33KB

  • MD5

    11375df748e68f1cd81d8f34da131474

  • SHA1

    fcdf2ce894c2b87f507b2a009a183929e175d88f

  • SHA256

    ba733b240ef4c00f1f7921a1bf5652e98932d0940a69a7994f6b16ab29aa1e0b

  • SHA512

    7281ba7c4fe1aa3488c2b20114222e045d94ad96374a854f214a1dc6321c887f9da9de5a50262e7067f459b557a870d9646c600490a964438f1d981d729536a5

  • SSDEEP

    384:zfP/SG1aTTcPTEUV75LC2+M42pfL3iB7OxVqWYRApkFXBLTsOZwpGN2v99Ikuisy:T11weF3D42JiB706VF49j9FOjhObiI

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

physical-appliances.gl.at.ply.gg:31433

Mutex

qs7gJLPqPfn9H0pT

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections