General

  • Target

    tess.exe

  • Size

    347KB

  • MD5

    de7b39501ea4e4256080af05801a2e71

  • SHA1

    71638b16c3f445afb8dc1510fb2baca1e418a4bd

  • SHA256

    290ef2ee798de6b31d52ec34ed631994a917cd1a69fe5509afce365b59eeae0f

  • SHA512

    7db37ae296c8793c32fbfafe6102b636e2f08459269725de6804e752cc844c22b7aade23eafb68577b24dda29b8d88fa5ca7e7dc5fbc2061d3d30257216045b1

  • SSDEEP

    6144:mTK09lWs8zNJfwguKV5BwUnZqazMhD9RLJt88sndcP8pPyDvUGOkseb:XsFKLBwiZlzMB9xgndcP88DvvP

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

Attributes
  • install_file

    game.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tess.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections