General

  • Target

    Mysoft.exe

  • Size

    68KB

  • MD5

    cd634aab676935441ba902dd8369869a

  • SHA1

    662f429455254e80a75149a98fdfafc14cbe63bb

  • SHA256

    bb78b1c693d565a7516d39bb7ed307a4d0692bcaeca76271d4fead575bbe5f8d

  • SHA512

    017781bbf1064c24e032ac7bd5eb6d2f1372ddee15b4e8f9d2f202ecf882ed89c5c88fa3734cbf0cd4c6aee3c4e5ea311a7da8f4943ccf9d745fcf36a8252c42

  • SSDEEP

    1536:hn54NqcIc3D6fkSlBOisyay+b0ENWI6Jeu66+KOr1o4Y:NGOfk8O3yay+b0Ex6EKOr/Y

Score
10/10

Malware Config

Extracted

Family

xworm

C2

22.ip.gl.ply.gg:7543

Attributes
  • Install_directory

    %AppData%

  • install_file

    Soft.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Mysoft.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections