General

  • Target

    MMLauncher.exe

  • Size

    66KB

  • MD5

    62bb0d6eeccb4041a950b26411375270

  • SHA1

    018db11f0169c1264abde91fcd578f21699519a6

  • SHA256

    0079aa6856fb54a77bb8f2d318cca4ae17586cab047d4ab5bc7a06c9a2f9aba2

  • SHA512

    d17348285548ee5f703d714229930d7708d1ffbbd74c5c346015f44c4d1dc716d26a93fe6ceecc50110d9f2f9be22da5dc26bdeb890e3c0f74b7387e71c2326d

  • SSDEEP

    1536:Y1+oBnl1/wcQLJG2NXhopi2+bhsQa86p7OTt/Dyn12:Y0a4NLJJ+f+bhi37OTte12

Score
10/10

Malware Config

Extracted

Family

xworm

C2

22.ip.gl.ply.gg:18011

Attributes
  • Install_directory

    %Temp%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MMLauncher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections