Overview

overview

10

Static

static

10

nigger1243.exe

windows10-ltsc 2021-x64

10

Resubmissions

08-11-2024 20:42

241108-zg6dqszbpr 10

08-11-2024 18:49

241108-xgkqxsxflj 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    nigger1243.exe

  • Size

    68KB

  • MD5

    26a3d43a396cdab7acaa54d1e1d844d7

  • SHA1

    0124da7710299088ab4c821ba9f0a0caf2536447

  • SHA256

    8b058d5f1b9a2e7630a95220b00920720e9172057d3d33c42cf36a2af79c34d2

  • SHA512

    e232684f054ebd043a2b93eabf10501f8b481f674056f3a1f51d07da7d355baea6b58bf86151d7d34f4c36597b27c3155e3eaba4062616de26581857a48f31bb

  • SSDEEP

    1536:oatJm9NtJL7ntbirB6oQMxR86j4DumOI8cudzG:oW63biEoRxRtIumOI3uxG

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

conviction-48908.portmap.host:22717

Attributes
  • Install_directory

    %AppData%

  • install_file

    Windows Updater.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nigger1243.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections