General

  • Target

    minecraft.exe

  • Size

    41KB

  • MD5

    c0b0ade519a9512a0798f3928b15bb8f

  • SHA1

    e75b1e3354fdd36940dafd668888b01ab111ded5

  • SHA256

    74cfbb84ff6f43973d88a93ccd5eb806cec159db3ef5719fb10950a0637234df

  • SHA512

    ee9663d4020a90d8dca33d20857d9548e5da7f76a6717c4c55d8fee6b1eb68b2d62c3f9fae809ed766bfd823af78e8f270c1f9db68b0fb9fb69946d7a4d37a6f

  • SSDEEP

    768:j/t0e5eN7JW8ymanzObRJF5Pa9O9t6tOwh+33z9:HwlJW8PazObfFY9Qt6tOwMD9

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:8848

Mutex

HJAj4jJDLZnVjsTe

Attributes
  • Install_directory

    %AppData%

  • install_file

    minecraft.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • minecraft.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections