Overview

overview

10

Static

static

10

майнк...т.exe

windows10-1703-x64

10

майнк...т.exe

windows10-1703-x64

10

майнк...т.exe

windows7-x64

10

майнк...т.exe

windows10-2004-x64

10

майнк...т.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    майнкрафт.exe

  • Size

    80KB

  • MD5

    5e88972955f0f27a12ff125566e682f0

  • SHA1

    986ff9740e2475f50777e61a6405b4b911206a32

  • SHA256

    d693e02eb53093f3ad13564f8a3ef903b9dd0ed5b51d8e5daff04aa8f0ae3d63

  • SHA512

    d373fb0797418435ad29ecfd08ab6f856171e17cc32deaf6106aca722e328098cb60d060ef0f6ac8f182587a6710ee554e302e0b6d3b8f9008f55244dd8a9e59

  • SSDEEP

    1536:pJqm2GSIfZ/O1NbzXbuujQDW3i/T61QHtt3Obiu0YJAiA:p8m2BwZmNbzXbuup9wtt3ObN0HZ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

email-champions.gl.at.ply.gg:50458

Attributes
  • Install_directory

    %AppData%

  • install_file

    MsBusDriver.exe

  • telegram

    https://api.telegram.org/bot6814850214:AAGtrnkhUh3vMq-wH7W5cvNuSWLdcy7mtis/sendMessage?chat_id=7094837950

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • майнкрафт.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections