Overview

overview

10

Static

static

10

epicgames.exe

windows7-x64

10

epicgames.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    epicgames.exe

  • Size

    326KB

  • MD5

    73955881243bc294ee810ad47a36b15a

  • SHA1

    a5f9dafe3e9a2f178547600855aca5db41e0153e

  • SHA256

    cec3abe8f0fa6b6548e6a0fe7c639de31e966c9c3a36d9e68ea5f85e0bfbe3a9

  • SHA512

    2a8a3d6eb9690b7e33019d4893d2f44ade5a122f70887ece7532c2449c880e4edcad241ebd836f04c2bf41afb1da4989377d60891aeee0efc748a150b4dc92d9

  • SSDEEP

    1536:IGTRqN0nuzlBfDabXeqm+bTnedwl64OK00jqXW0Gf87oSc7WgiB8ndDtzeUXM9l0:Ih0nSnejs+bTneOOK00mmRZ2c40

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.21:55421

advertise-msn.gl.at.ply.gg:55421
Attributes
  • Install_directory

    %ProgramData%

  • install_file

    ohiotown.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • epicgames.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections