Overview

overview

10

Static

static

10

SkibidiToilet.exe

windows7-x64

10

SkibidiToilet.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    SkibidiToilet.exe

  • Size

    122KB

  • MD5

    f5405e8cdea17fe0e3e6c69a8828460e

  • SHA1

    fee269259ec247e8ded66d716b3402b60361aefa

  • SHA256

    cf12872905018f9d0bbe3aa568547bddc407501f9f73ea527e8e4f51449bf778

  • SHA512

    dd4b5406fdec5b612c2249df0d07debfbb47ee170cb598ce0633628277565f265524da29fca61a6904102b57fcb22d36affae6dcae70d285302e0515811c4151

  • SSDEEP

    1536:flVdXjS9g6tMKQE8sFZuSd+bOjks7vDw6+/FOBOEc+F2x9L:fl5EhZN+bO4sEeOnGU9L

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

lijaligibidu-35558.portmap.host:35558

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    Windows Security.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SkibidiToilet.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections