Overview

overview

10

Static

static

10

Ozj6OxEatlic.exe

windows7-x64

10

Ozj6OxEatlic.exe

windows10-1703-x64

10

Ozj6OxEatlic.exe

windows10-2004-x64

10

Ozj6OxEatlic.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Ozj6OxEatlic.exe

  • Size

    66KB

  • MD5

    32acbdf48472ba783782b6e201bdff5d

  • SHA1

    c04f035e8408d7d25bf14801d82b6d5c0d17067d

  • SHA256

    529ff848c96ad5781e1fca999b5abdbcf40fc9696f3a1e4171418bb40ca34ff0

  • SHA512

    52afb509012da39f37dea251a1440caf8fb4f229754f4feba3a3e82a46a0fc6223eef76d3530e33c8af8f608d58f0b16ac3da24138e37fc0a2d89ec80ced3641

  • SSDEEP

    1536:miQPjy3sgY9XneNJfmPp2+b5Apwub6b9OpXsdLl:mbyaeP2b5kYOpX+l

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

22.ip.gl.ply.gg:18766

Attributes
  • Install_directory

    %AppData%

  • install_file

    comhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Ozj6OxEatlic.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections