General
-
Target
Solara.exe
-
Size
91KB
-
MD5
b4be3f19527e6c2b0065e742f9c1f838
-
SHA1
57156feb7c069cd31c939a8a0540e7d46e0c5427
-
SHA256
8f24c89391201e63ac570b9ace47eac4cac06157890056d7c09ac762d4c27cc1
-
SHA512
cbaaedd1ea1da87e86144058894e47b91a59c518e4a23c40d928d64f7fd542070c58d552e5e19e8640796967b4b4eb4106c11e6336f020f82ef90296861f327e
-
SSDEEP
1536:VMK650osONtFw9CuK6OOCtKiQ6Fm1AMtaqlzvgb1j5PMzk3Cletsy+q3:l+VscFw9CLOCXQOmu5KgBdPMzhetsDq3
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
127.0.0.1:13970
accessories-retrieve.gl.at.ply.gg:13970
Mutex
nipMTFYV6XUBvXZW
Attributes
-
Install_directory
%AppData%
-
install_file
Loader.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Solara.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections