General

  • Target

    main.exe

  • Size

    236KB

  • MD5

    94274e01eb584a1368a1a30811a9e9c5

  • SHA1

    53d9587ad812c55050b489bf437e4610f08c7b84

  • SHA256

    d4b58af733a8ac44a3a1453f57a61df967de4d582fc69a076f1de82d0cefe722

  • SHA512

    8f2e036656518c7cf78f2d850ac867449615e0f3933d8d491f56392a0e5b6be2b14196db913b2272041b09445261a2043e551534584118174d9de513177c470f

  • SSDEEP

    3072:IHT/g4nb0TcalMOx3c8SKfbzxcwg7es6/Vsb8VKTu549oJMfF/H9N3Ky9NzLnO:IDHbacUhcX7elbKTua9bfF/H9d9n

Score
10/10

Malware Config

Extracted

Family

xworm

C2

zip-connection.gl.at.ply.gg:33171

Attributes
  • Install_directory

    %AppData%

  • install_file

    island node.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • main.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections