Overview

overview

10

Static

static

10

Runtime.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Runtime.exe

  • Size

    77KB

  • MD5

    70f947112e2a87e3f3b71d47a00c5bd2

  • SHA1

    de11030afe7e644fe172cba666f5054c68f3975b

  • SHA256

    cc284c5da70bd76ab83dc1202239a033dbba134b950ba74648463e955509f1da

  • SHA512

    6e6a310c3d2b5fdc47b2b8f7a5a1c9dfb0647bc6ff657298435983fdceda566eb9b69dded4ac9b1c363a3f54519f84afea6d172abbf40edae5fa9864f1b89090

  • SSDEEP

    1536:wdffq2ZmB7nWwmnp954m2E1buD5Iv0nMx846aOh8dl8mdbx:w5qwI/mp9547E1buD+v0MxpOh84sx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

distribution-between.gl.at.ply.gg:39183

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    Helper.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Runtime.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections