Overview

overview

10

Static

static

10

Spotify.exe

windows7-x64

10

Spotify.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Spotify.exe

  • Size

    121KB

  • MD5

    059bd3419b36e8c9c936cc76e6997677

  • SHA1

    71dd80e4277930567615b6b1046027de77c30097

  • SHA256

    402874946771a1e440f01f33961b1ea0fbb4062e6759c3865bf250b94d568499

  • SHA512

    341ea6deb5adc5290818cc02ffaaa24e4aca79e5073595cdefd4d453b61c3cea7edacd9686da5d015c676f025cdd71b773fc57a626225b068ece844d9aaab112

  • SSDEEP

    768:uFXC6fTko1uB8g2fGPQ+6PTnPakb9A9vC8yNDOhhkmKs1lKaoHoTFz:uFXTk70ykb9A7cOhyruKcz

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:4140

147.185.221.21:4140
Attributes
  • install_file

    USB.exe

  • telegram

    https://api.telegram.org/bot7941260471:AAEv-kCBGyS_dIDa29v5SvpVyZtfpkAHfyE/sendMessage?chat_id=6323688757

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Spotify.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections