Overview

overview

10

Static

static

10

exerat.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    exerat.exe

  • Size

    144KB

  • MD5

    2e8e927794b0c56324233077c43e3167

  • SHA1

    0cb2f30a977e83c3ce6275673c718ae20ec32337

  • SHA256

    b52c318fa8920d155d54fe5c691a4439a65a017dc66debf5439ca8ff8bcd9b79

  • SHA512

    a4df86e1f16bb5f94f850e14be647ba5119170ac36e616a20bceab6d230d6f6de6049fabaa416434611542b466306203a71ec36817b66e1af857185a1b5654c2

  • SSDEEP

    3072:QYfiiyfb9mNOgQBQFF2RYtMgK+Wl9HhDhIpfeZQKGtoFLjMD:lSbPCjthy9H9h4mZQKen

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.21:37029

Attributes
  • Install_directory

    %AppData%

  • install_file

    Steam Client Service.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • exerat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections