General

  • Target

    Minecraft KeyGen.exe

  • Size

    256KB

  • MD5

    59b3d8726326c7315ee7f5be5542bfff

  • SHA1

    11b5cd1001f190543230a0da4ae33971550ce8fa

  • SHA256

    4cc5cb489c362bc072dc1f9608689990189c2b3e9b867918cf07022aeb389fa5

  • SHA512

    28a21ef3c2f5c809184f5fa8c7b68fc3327966035134dbde8872f9a4f9b7a1a04bd53b5f4f5baea4e37031a482a3e2a83c33bc1aaefee02f036c9dcdbf97f6de

  • SSDEEP

    3072:anqr3z/uIskbIlCNRyUFOuGtZTxCiVnFvHnlRxHu7llkXx:Dr3zpfbLytTxCgnFnb1YnkX

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7578

dark-hammer.gl.at.ply.gg:7578

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Minecraft KeyGen.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections