General

  • Target

    Hybrid.exe

  • Size

    77KB

  • MD5

    ada9615fef960dc0248740dfae46b070

  • SHA1

    c46f5d054c0ea83c0766a7e8d8983942e5da9ea1

  • SHA256

    0c004347b6e5af37a5011a442a740f0a3c36da056f6285dbc0561568e94edf89

  • SHA512

    99a27ae328d8ccee6cdc65c09151a6a9fadcf354d8fe714309585d4ce5a2a024d48d58415e9db27eae233df6ca1479f31b4aaa7cbd059430fae31c5c45287af8

  • SSDEEP

    1536:ozbrlu3+zBUzA5/W7bpfuWhMCgQijaOfrvHS:oznluwu0JSbpfu0XgQijaOfra

Score
10/10

Malware Config

Extracted

Family

xworm

C2

178.215.236.68:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    System.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hybrid.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections