Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    nigger.exe

  • Size

    62KB

  • MD5

    8dae2e9feb16b508e2ff9ac00ca42df7

  • SHA1

    0202bdfc740200f30f79250ab65263912153be7a

  • SHA256

    197bccd40f5167b3345b34d22bc49db88b287308ca46118522b023e59198b298

  • SHA512

    dbb2b5995231aa0a68bfbf874f02f509b1b39ecfa86c02ed5dff69dd9f2f9ecd3391fda227336bd2cdb70ce6cd5b970cc194d2b3f1912c96d00fa5593986d8b1

  • SSDEEP

    1536:e7NwGphk/VOxsB4Rn0eOBvkbGe3X00/T7jnnOjsk9:e7NwCnLn0pvkbGe1fOjB9

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

23.243.100.240:2121

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    Windows Defender.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nigger.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections