Overview

overview

10

Static

static

10

d3xik-fanowskagra.exe

windows10-2004-x64

10

d3xik-fanowskagra.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3xik-fanowskagra.exe

  • Size

    34KB

  • MD5

    f8d9a0a0a841deef3e48185fad1e0648

  • SHA1

    1d2c4eeca78bca6a58815c54ef42ae2e9ede74f6

  • SHA256

    1503cba5a67742303e45c266c9585e110429ff25a5c25486cabb82504e51a916

  • SHA512

    16d1512724d1ff4cddb4c87cde832601a67a834c29c2b9c08a6159db46c2b481c25e465cab5eb3fea1042e95399a5e962809259a1a0f89565e0ed041448b8596

  • SSDEEP

    384:aVxu9qBOae6oK/I7Z9plUzO7LMeyZ9CZpbW3tXe3qXR8pkFXBLTIZwYGzcvw9Ikb:GxuaUJRnpyZ96pbWx9FV9jjTOjhy/4e

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

lefferek-42016.portmap.host:61672

budget-compiled.gl.at.ply.gg:61672
Mutex

G4XVm9sNwISp9OCk

Attributes
  • Install_directory

    %AppData%

  • install_file

    DiscordClient.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d3xik-fanowskagra.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections