Overview

overview

10

Static

static

10

HybridLogger.exe

windows7-x64

10

HybridLogger.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    HybridLogger.exe

  • Size

    284KB

  • MD5

    f0b6cf327778e18f05fe4499ee6c2a83

  • SHA1

    fc29e64c4bc16cb71e9ccdfc14f4879f20e48ee6

  • SHA256

    538bd1f85120250a15a39406dc641a1c7f1934a66a588e28bc888017eebf5f14

  • SHA512

    d75d4bcbb0823caaee5da3084d31f8284ff3a846904a0be17b90b10a814005406f79776302d59ad8e2359afb5094cb5e8ab1df284c2158d085ab74939252dcc1

  • SSDEEP

    3072:rzrZPAFy9HBOMOdglOHM+3Ej6YZx8WOJ9ejyW36R2:Hrd6y9Es+U5B

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

94.141.120.222:7000

Mutex

xdOIKQkVVHQuoFLl

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    yo.exe

  • telegram

    https://api.telegram.org/bot7254934799:AAH0-lr3Fq5mBY3in6-SpVNvLOxMyfi_cE0/sendMessage?chat_id=7357257595

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HybridLogger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections