Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Alpha.exe

  • Size

    129KB

  • MD5

    2468d064be262c14c5922c7c6a57925d

  • SHA1

    0ea2f809270b429c86c20b7c9007235401eb0042

  • SHA256

    bd0b1d4c9d981ed79d2824dd8da93bc33032a8f9d3b623cf5a4568fc96781f4b

  • SHA512

    62c5c90d6fc0f323f53d970be7d7606bd3117c648d483c28b8cd897081f95fa729f1621005d15e178d205fd55630c9d638e3f5c74c1ba7530d7cd942f8462f0b

  • SSDEEP

    1536:M0gJjkiQ7Ot50gdx/+D0UlcpV6bMQfBDhJdz6lxJOU1511Jw7tR:/gJ2A5NdFi0N6bMQDM3OUputR

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:16359

22.ip.gl.ply.gg:16359
Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Alpha.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections