Overview

overview

10

Static

static

10

DDOS MACHINE.exe

windows7-x64

10

DDOS MACHINE.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DDOS MACHINE.exe

  • Size

    246KB

  • MD5

    3f4ac5ebf07ce3b4fbf7c53a99e9a95a

  • SHA1

    3fe8113fa02867e96b671916a1f64afd0652bb3f

  • SHA256

    4e2f315aec3cb1e8bc76424378ece6fa983d440b24d28863db91985f1adf4e7f

  • SHA512

    c1099c4874e90cc0aa571434b6d8681e08914eb9fc21d6b2ff55aa4a3c459e769dff29a4121f728f047a6b714d9adc7f8c9493aaccfeffe57e11321bb36bc7de

  • SSDEEP

    6144:gr9hCkZbhCFr+UhcX7elbKTua9bfF/H9d9n:gr9hCUE+3X3u+

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

193.161.193.99:1194

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

  • telegram

    https://api.telegram.org/bot7359511930:AAFUm0iYhzGrRDo1gtea6bO9ZS8MYaGi__U/sendMessage?chat_id=6243944849

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DDOS MACHINE.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections