Overview

overview

10

Static

static

10

hawktuat.exe

windows10-2004-x64

10

hawktuat.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hawktuat.exe

  • Size

    75KB

  • MD5

    ba3af20e691277dc2f1e9c7fae9fb732

  • SHA1

    213ed9eb6d8e9e5e1799e983ddb8bcdd2c8ff9d9

  • SHA256

    9413b3e90fac7b85565005468fec6a6a2bff71f7bb66d227899e8373a21a30e7

  • SHA512

    682d586071252f762c7d5fc55c87c068953957ef844703a269ae3f43bd908365cbfe3609558aa21971493fcc77dd1caa0d1386165c5a4d789ba1e92fb623f099

  • SSDEEP

    1536:M1tBQ1NOo7kl2d8mUO77zJlMbZbruZqA/UgyCq96X53wdOCnlQ:WtWStmV7zJlM1bSas53wdOClQ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.23:15863

Attributes
  • Install_directory

    %AppData%

  • install_file

    SystemUser.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hawktuat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections