Overview

overview

10

Static

static

10

softrb2.2.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    softrb2.2.exe

  • Size

    78KB

  • MD5

    05f31011d21a9ceadebbef38c3ea4c86

  • SHA1

    0acc0c8af5401af3e6f9468fcb171aba3b276468

  • SHA256

    58ea83dc10579f62c77a0f8938e71f96a7faefeb0386a744f41635a6af5e7bfd

  • SHA512

    8eac0e92bc19024a5731f967fc98d45b6bb1310734653356fc857dd28189575e7429181986f004ba5e8c3921caa8b01a7ae77d9e7584159cc59b8110bb0276f7

  • SSDEEP

    1536:/XA9Wtx9JXEqxqPC3btK9WrQEZO569DtYOMNdOX:Yq1Vxqa3btK90ZuOMKX

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:48534

localhost:48534

domain-vote.gl.at.ply.gg:48534
Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • softrb2.2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections