Overview

overview

10

Static

static

10

fixdragmeinto.exe

windows7-x64

10

fixdragmeinto.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fixdragmeinto.exe

  • Size

    39KB

  • MD5

    f7b4d28cc79e52c0ec939661cfcb43b7

  • SHA1

    4e4a90809ee10f2c60cc10b958d3d3312c66f837

  • SHA256

    50fe9f74d241c6c9932a2eb09d31ec4cc26deb5f0d2cf188b3495f5109186802

  • SHA512

    9a8aeab356ae585765b218eb08ca1899cd8f039f5695b8e60eb61159644545dc13dd5e696abc32d4ffb76478d710c6a66517ccb9434b31ec72b4ce151dbe5521

  • SSDEEP

    768:1QoCLOsasOf2P/k4UAIgkOIBhqUlPpstF5PF95GAuOMhY33I0x:1dCLOsasOfP9AIgkRhqU0FX95GtOMG4e

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

behind-h.gl.at.ply.gg:1234

Mutex

yMjYmc487vXDJQa3

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fixdragmeinto.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections