General

  • Target

    Skynet Spoofer.exe

  • Size

    68KB

  • MD5

    abed4081e3e87783f2e059fdc3865289

  • SHA1

    54327af34f7dc7d71f7a3f18cfde0770b7dd1453

  • SHA256

    7d1c319f160f3fc2634a80a68378da57412cd84946a8232560defc11fc2e1413

  • SHA512

    0613ca3f8ef9ec45bc583e4a345e50be188644cac83460bee5f177f436cb0ef70b823ac430f08330826404045b59fd0d9a1f38d0bf8a9b2d1641b6ceb1da7a22

  • SSDEEP

    1536:JFQYF8yDm8RBnj4c2bDaaoPfz6ZO2eef3Y7Vj:JF18yD572bOaMf8Ohef3aj

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:6556

sell-let.gl.at.ply.gg:6556

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Skynet Spoofer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections