Resubmissions

02/09/2024, 12:59

240902-p8d4fs1gjg 10

02/09/2024, 11:15

240902-nc13nsyfjr 10

General

  • Target

    Anti Root.exe

  • Size

    37KB

  • MD5

    c2ad1fc110b833b20355756811e0fc31

  • SHA1

    3102137ccabcbc3e525420a3b5b61f236f8e4ebc

  • SHA256

    657d598396ea466a4cfb0dd2d0b932a6f5db5ced774a6c1708002688ae24bf60

  • SHA512

    1173d812d64d4cd49efe2d6f27103852b650b86b2c0823f04690a4dbaedb460eaa383a669f1b42d199222de0069509244d67297821dc5c7ca7130b6c313a202b

  • SSDEEP

    768:Uz5lT+Q2deKmxzoAXFyK9OiJ6YOjh5PygL:Uz512dGsuF397J6YOjfF

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

mode-clusters.gl.at.ply.gg:36304

Mutex

4ve1OmdqYAgbmjh9

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Anti Root.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections