Overview

overview

10

Static

static

10

3952-9-0x0...ry.exe

windows7-x64

3952-9-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3952-9-0x0000000000400000-0x000000000042C000-memory.dmp

  • Size

    176KB

  • MD5

    b81d703ebf8792c1379ba61bbff8f3a5

  • SHA1

    8166d92f5c33db8e18a86429878b01830d1da4c4

  • SHA256

    79caabce07ded73dd7c0fc51ad2158c8966dda40c5d64ec62afec901efeebbf5

  • SHA512

    833a6a5723987626116c534b3bc8dfb07004c718ef64b9c40b4dc6aa0fef1d430e8e770c22d6e887ebc96fbeb0d85aee138f5a5a53be7806378fb0ced2695bb4

  • SSDEEP

    3072:NzFIwXJyeMNa/IFoH5+I8n9GkGwcPUUVl4KyVwEKct/4t:5XANsUI8n9GkGwcPUUVl4KyyEK2

Score
10/10
xehook

Malware Config

Extracted

Family

xehook

Version

2.1.5 Stable

C2

https://t.me/+w897k5UK_jIyNDgy

Attributes
  • id

    364

  • token

    xehook364240207519384

Signatures

  • Xehook family
    xehook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3952-9-0x0000000000400000-0x000000000042C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections