General

  • Target

    daa11.exe

  • Size

    56KB

  • MD5

    75f2eca382bfcd248ae850a1d505e3f6

  • SHA1

    132921a7dece726938e6e58a73f86e04d9f21535

  • SHA256

    389f95968ebf82ed14befdb2b3bd481b2d5c04827f346818bdbf8db9b5a82841

  • SHA512

    52abb6a12a9b9b83347dc8fe039b118259de02cb168cbcee3b925241137f25a6e8beff5da896986611015e3f44004ba05804f0cbe186f9e31f01f4b3c8723777

  • SSDEEP

    768:hBmGpHawB8NuIDHnFK/cNXsKIldXrbKHLcknHtS7Js65PoJOl7hg2TYA5p:P/HaA8QUHnDNg7bKHLckE7Js6wORV5p

Score
10/10

Malware Config

Extracted

Family

xworm

C2

31.208.113.236:8080

Attributes
  • Install_directory

    %AppData%

  • install_file

    test61.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • daa11.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections