Overview

overview

10

Static

static

10

a374468578...0N.exe

windows7-x64

10

a374468578...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a37446857858e2c98ffb935c2094bb04dd8d74f367213bfa457063bcb9a578d0N

  • Size

    66KB

  • MD5

    d443f22b3c73adcb31e146c34f0e64f0

  • SHA1

    d1fd7f7f7454ae2d85ad520ca28bfd288a094849

  • SHA256

    a37446857858e2c98ffb935c2094bb04dd8d74f367213bfa457063bcb9a578d0

  • SHA512

    e3dd3761784fa7aa66be01d56cbda0550b2286992ec0a653d8683d5471fb8f102b44f774173517db51fd2e24538023bc1323d45c452632cb96a59a8720859ff2

  • SSDEEP

    1536:Mpe9v/mQfqGFFMtSokbezID/aY6odSOTQYgvas:MJQ6Sokbe4/aadSOTwvf

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

across-jul.gl.at.ply.gg:51175

Attributes
  • Install_directory

    %AppData%

  • install_file

    setup.exe

  • telegram

    https://api.telegram.org/bot7864092285:AAGGPrb0Mofqx8Z90Btfh6xGpRozwpx_J9A/sendMessage?chat_id=6705935444

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a37446857858e2c98ffb935c2094bb04dd8d74f367213bfa457063bcb9a578d0N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections