Overview

overview

10

Static

static

10

bootstrapperv3.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bootstrapperv3.exe

  • Size

    74KB

  • MD5

    06c9988e5e3c584839c29106408e83f7

  • SHA1

    59689a6761741c738fbb127d8dcef3215d03ca44

  • SHA256

    9997a1fe0dee216d3da6ede8c64e06e3ef4a43e877a93084fa5c13bd9fc36993

  • SHA512

    96260b05f0b5acfa8b024a19f85136391605627c54911f7bca4c0747951b45eeab5e9b5f86f23c2768d1ae9d331c3c02ae02cf264928afa4bd704866f6460caa

  • SSDEEP

    1536:4MuvYwZ/evX5DGlObdy90wC+/bvh6Xw5YWaK2BqO96LkdKx:4XYwC9zsahsbvMXahaK2BqO96Lvx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

jan-bunch.gl.at.ply.gg:15313

Attributes
  • Install_directory

    %Temp%

  • install_file

    WindowsTempUpdate.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bootstrapperv3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections