Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    MeteoriteMenu.exe

  • Size

    73KB

  • MD5

    11e06be8e6ecb6b2444bbcf162b1e972

  • SHA1

    3e0590a8016f17640310a5165debad268b5e528e

  • SHA256

    e23767817839ed3d6a9d9f356e34ec6d008d4568578634322290ba9d0322b724

  • SHA512

    400f88b179db3ec0bb159137f2b6f55bef852521dab2f558c433d016974383f654aaf468db00c19e148d9ef18e6f62b16e08e3e133b1b7a220bcdb9c6a68a249

  • SSDEEP

    1536:3Ww91HXHcb7gVbt+RRbso/VIOY36wu4OvcbxOZ:pzH20bgfbnMu4OUAZ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

10.0.0.5:54298

gtagfan211-54298.portmap.host:54298
Attributes
  • Install_directory

    %AppData%

  • install_file

    Novafix.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MeteoriteMenu.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections