General

  • Target

    e951a97b8eaa572b11be2b6196301d80N

  • Size

    77KB

  • MD5

    e951a97b8eaa572b11be2b6196301d80

  • SHA1

    d0851adfabf1370261d253f7d1f93d72b291821d

  • SHA256

    7dc12e312f2c295a186cdf3cb15add091e8b2255ab239d8911f9f871f9428f07

  • SHA512

    ca54becef645435a8eb11d87a4efd437cc1893c6fd096543cedbfa72588fbea213b14f0591874251e3b4be07b3d958ff0ee92111775a67c16a26c4cce5afacc9

  • SSDEEP

    1536:YC/9qyUqRRDSolYPdKhoDR5FJpFbSViryJjBIRJi6OKWOw4rBL4ep:H/9qpqPDSol1S9bCiryXIwOw0pp

Score
10/10

Malware Config

Extracted

Family

xworm

C2

got-tied.gl.at.ply.gg:47080

Attributes
  • Install_directory

    %AppData%

  • install_file

    svhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e951a97b8eaa572b11be2b6196301d80N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections