Resubmissions

21/09/2024, 13:59

240921-raq2gawakg 10

21/09/2024, 12:58

240921-p7wxwatdjq 10

21/09/2024, 12:53

240921-p4x1rstckp 10

General

  • Target

    SymacV2.2 New.rar

  • Size

    317KB

  • MD5

    f12bc6909c8b1c3798d6338e6e4611a4

  • SHA1

    1595bf92546c326073126b0a7ddcdf1a11c43605

  • SHA256

    9152b71557df75270cfacc42ea2a8eaabbde9fcd32dc08076074d569ff9463a6

  • SHA512

    4fe9b6fad69e7610b76045ea2d6aab2f4da0f56af7d96924b8be373c12dd318875da62506d1553e1635cbfa8fdb1eb9e2ba11d0b2fe660c6c013ac3ea43fe2fd

  • SSDEEP

    6144:S2fOXf8j/dW6B+HU5rmF5u6fgquwdPkowKgpyb0P3LjIZsGsVWjxkYGnMPxkbA:VuE/d5oFzhb67j9PRYGMO8

Score
10/10

Malware Config

Extracted

Family

xworm

C2

usr-libs.gl.at.ply.gg:52597

Attributes
  • Install_directory

    %AppData%

  • install_file

    SymacFixed.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SymacV2.2 New.rar
    .rar
  • gui_images/accounts.png
    .png
  • gui_images/cookies.png
    .png
  • gui_images/discord.png
    .png
  • gui_images/female.png
    .png
  • gui_images/gmail.png
    .png
  • gui_images/info.png
    .png
  • gui_images/inventory.png
    .png
  • gui_images/male.png
    .png
  • gui_images/pin.png
    .png
  • gui_images/settings.png
    .png
  • gui_images/symac.ico
  • gui_images/symaclogo.png
    .png
  • gui_images/unfriend.png
    .png
  • requirements.txt
  • setup.bat
  • symac.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • tools/addpin.py
  • tools/generateaccount.py
  • tools/getcookies.py
  • tools/instantlogin.py
  • tools/inventory.py
  • tools/logingmail.py
  • tools/unfriendall.py