Overview

overview

10

Static

static

10

nightware.exe

windows7-x64

10

nightware.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    nightware.exe

  • Size

    33KB

  • MD5

    bcad6018c1743a2a2822a8b8fd532f9f

  • SHA1

    2cd27ff0be686a206a96c96d245d0bf5559b8996

  • SHA256

    24078a0e79b673be45864b24a6cae1b13a856db53baf8279f616557bce9359d2

  • SHA512

    dd0a2b259bfb5941ebfa7f8f3bb77cab5023f5b1cd4d6800252660177e34c0de4840aa83896713ebe1a144fd36fac2d8ab1816e51241b6c5eb204edb360131db

  • SSDEEP

    384:9fP/SG1aTTcPTEUV75LC2NaM42pfL3iB7OxVqW1RApkFXBLTsOZwpGN2v99IkuiM:F11weF3Nf42JiB70LVF49j1n3Ojhfb5

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:48480

custom-monroe.gl.at.ply.gg:48480
Mutex

0wLt41S3luUixaA7

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nightware.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections