Resubmissions

24/08/2024, 18:42

240824-xctg9stcrf 10

24/08/2024, 18:38

240824-xae7vsvgnl 10

General

  • Target

    rootkited.exe

  • Size

    295KB

  • MD5

    abd64c0e91770424548c61f403e2761f

  • SHA1

    1ec9f5f66d8ac5321264a3d30458aa5b5ca51803

  • SHA256

    e5d656cc24afae1746244cf24df46ff996da8b4341239bc7189731a9b93660b1

  • SHA512

    e89d5d41f320123994f239119c4073e5f212ea185f3160378e9ec514d6a8a8451ef92c79e0b3b1e3fcb482db6c176f1fb4bfb2a34f1539a7fdedb6940d9f3129

  • SSDEEP

    6144:pmZLLdylplbv0NhguKV5BwUnZqazMhD9RLJt88sndcP8pPyDvUGOkskb:pmZ0lz0zKLBwiZlzMB9xgndcP88DvvP

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    game.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rootkited.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections