General
-
Target
SolaraB.rar
-
Size
38KB
-
MD5
a7dd1ccb2a508548af327d3a831b1540
-
SHA1
edae272b29a0fc480db3512f8d698793aa56d84b
-
SHA256
35ba562b6c3e8b92a791db5a6341150428fea42222f82abf40f120a81b6d7c58
-
SHA512
bb224f85d0f63e6f31f2bb079be7c82f2c6845fb12097add1bca297fab58ed2bde3424dd67733a477db9008b3396de8e3ab703678820bc3bcf274f549f01b8d2
-
SSDEEP
768:UooHRJXPXgfSFfSypjNdUoM224xWKr/OWtMiK7eE1nUVBqSYgK00LPfVaaIY:NG9hRcBSQq/OWG7R1+XKXfVJP
Score
10/10
Malware Config
Extracted
Family
xworm
C2
loss-winners.gl.at.ply.gg:61007
Attributes
-
Install_directory
%AppData%
-
install_file
Expensive 3.1.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
SolaraB.rar
Password: 123
-
SolaraBootstapper.exe
Password: 123
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections