General
-
Target
7d89b01bf15634fe03d943e73e5ee8e5cc04079c99c3d2635948bead2f179c21
-
Size
65KB
-
MD5
9486aecf42021df267cdd56c3b7c3ea8
-
SHA1
8e97adc394a405b9a19d6d5c105f98f65b79dfba
-
SHA256
7d89b01bf15634fe03d943e73e5ee8e5cc04079c99c3d2635948bead2f179c21
-
SHA512
51e851a81874bc23613e4d360011c480db4e2a718f16a299bac81f28018a712a1e038a2f71595a426933e89602284f0a35f00a2aa25dd8cf320cb782d7d17419
-
SSDEEP
1536:saxVFH+GAGkDJ0iqp8He+bDLSpX4Ytp56d29Oh6GY:sak6kDJ0ge+bDL1YtpesOh9Y
Score
10/10
Malware Config
Extracted
Family
xworm
C2
22.ip.gl.ply.gg:34382
127.0.0.1:34382
Attributes
-
Install_directory
%AppData%
-
install_file
svchost.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7d89b01bf15634fe03d943e73e5ee8e5cc04079c99c3d2635948bead2f179c21
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections