General
-
Target
490865c96b82805a395497c5d870743b4fb9b2b9f3de548193a9dceaa11395a3
-
Size
41KB
-
MD5
5c48fe3471cf8db3c8c1cc1278566ec7
-
SHA1
ec5b1513df34018699823939858846dceed347a7
-
SHA256
490865c96b82805a395497c5d870743b4fb9b2b9f3de548193a9dceaa11395a3
-
SHA512
ac91cd0780099d02ee3d57962439812d5a5c147177caabbddedf2da274720c953543de7b8ce33d83cde8a5b9043736c75eac17779940292e5fa3024ca048320d
-
SSDEEP
768:tCJu44/aeqvujYXJMs5afEHDmaFWPa926OwhZZameu:tgu44/imwKsEfapFv926OwRzeu
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
copy-nigeria.gl.at.ply.gg:21026
Mutex
hHrxBd1WbcJItcMM
Attributes
-
Install_directory
%ProgramData%
-
install_file
Desktop Windows Manager.exe
-
telegram
https://api.telegram.org/bot7269786725:AAF0IPx1BWTdW_vbZqP8HGNrxWWFpF5CvYs/sendMessage?chat_id=5465523859
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
490865c96b82805a395497c5d870743b4fb9b2b9f3de548193a9dceaa11395a3
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections