Overview

overview

10

Static

static

10

Rat.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Rat.exe

  • Size

    132KB

  • MD5

    4d5c08a8d1bc4683d15c59aa2831c0f5

  • SHA1

    2e049326faa95c99be3bb30d5e09c69e23b84825

  • SHA256

    b87418a3c857386ba79b3e2201569017231f6afbaacb5ab8e0fd4bc78afe2418

  • SHA512

    1ce78e725fcee2b8c3e60df143abbded9d61253c3dd3221b50bd67f7acf57d3ae1df070b92e03b1fa142426cc2629acd65376fe27f7ed70b3f464c1ab5a69759

  • SSDEEP

    1536:thvD3Pf5yfFiSRabQbT0+KMwC6fvOsoOFRmH2jm6/IhO855BLz8iywy+6IEQD9rJ:3vD34ffabQAMwrvOsdcH

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

21.ip.gl.ply.gg:39814

Attributes
  • Install_directory

    %AppData%

  • install_file

    Driver.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Rat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections