General

  • Target

    92b901c9f8fda1fb17ca7647dd16825c29ff4fda2b6c4b15534426f95920ba6c

  • Size

    174KB

  • MD5

    d30b86e01ef85aa5fcf4292cb295f00f

  • SHA1

    3edb6178c1bb864088e68731032d011cd4c81be2

  • SHA256

    92b901c9f8fda1fb17ca7647dd16825c29ff4fda2b6c4b15534426f95920ba6c

  • SHA512

    b7765c81111b717667335e8a2349c58efdb3c7a8f376eb07ff27e2dec29db2529cd8353ebfc9f09ae88336243eaea30eac0a2fd22e66e8f27aeb9fb9f06cc2ef

  • SSDEEP

    3072:B0wUOcJbg09AOawiPz4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvf:C1bqzgVqwlL

Score
10/10

Malware Config

Extracted

Family

xworm

C2

22.ip.gl.ply.gg:54699

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    Google Chrome.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 92b901c9f8fda1fb17ca7647dd16825c29ff4fda2b6c4b15534426f95920ba6c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections