Overview

overview

10

Static

static

10

fbyfron.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbyfron.exe

  • Size

    80KB

  • MD5

    10843ec32433e4b597fafc805751cdb7

  • SHA1

    faef8811bc343b6353ae6bce0bb1bd948d195055

  • SHA256

    18c2442e7fb703cfacd159d1fda864ab890f1619c551590e4ed1b3afb749fbe5

  • SHA512

    f22501ae4f8f2f140c75447e29a63956c41bf3cb14ff60062ea94698321306b14e4677396c75ed5a02109d4b08786ccf77a97927e4d0b2efc03652aa16996403

  • SSDEEP

    1536:TJt/4Tdj0dwp0hSA2vbU2bhuqy36+iWdmOmTvo0V9:1h1dQ0EVbU21mi8mOmjt9

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

108.226.207.109:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    test.exe

  • telegram

    https://api.telegram.org/bot7118795069:AAF0tECtvNdP9QcEQM062NO-dKyK0tI2Ii8/sendMessage?chat_id=6926778396

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fbyfron.exe
    .exe windows:4 windows x86 arch:x86

    Password: olpl

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections