General

  • Target

    X.exe

  • Size

    73KB

  • MD5

    ad0314c9588f196a9a752b6732cf9612

  • SHA1

    b3b2cf2f28983fed481e1a05eb9adea7c3320624

  • SHA256

    2abb885ae702e7f97f263fe5189f4d4d07847cdfb40397d6a3dedc5a78388980

  • SHA512

    27edccf7972494ae82211f19f8e15d7846faf037355e1f79e36df994b681f055c1dab3685b0075265fbb0b0dae2f4f1bcd6524de9e69881de35fe87b1c4ee0b2

  • SSDEEP

    1536:3aImIL1mc5DiEN3K8WOycO7695UGwbYcUKoMOKK671XSyp:qIx1KTck699wbYccMOKK67Tp

Score
10/10

Malware Config

Extracted

Family

xworm

C2

dead-he.gl.at.ply.gg:57200

Attributes
  • Install_directory

    %Public%

  • install_file

    X.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • X.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections