Overview

overview

10

Static

static

10

nt.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    nt.exe

  • Size

    175KB

  • MD5

    f5cb8ec50fd33c0b9fb2590426263c6b

  • SHA1

    3faf55006cdecad7cb8981bf10bf2d15f9dbf440

  • SHA256

    9b2789f8d5bc9f778e7e1ad2594e259ea895e74ca68d30abcbca465f50a68ff6

  • SHA512

    63bb0bf68ddd261e62cb1df3c87e9a6355ebb51d4d3b99edc75bbd7cb7da9ed51f72bf10ddf0709095ee7712d8670926f0deda947b09c6be2d5bdfcb52c957bb

  • SSDEEP

    3072:4fYJ4iAFQgUN+b7hud6ORrGsizEBz65/M6If+3Js+3JFkKeTnh:4NL5U0b7c7KnIxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

held-using.gl.at.ply.gg:4825

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    EpicGamesLauncher.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nt.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections