General

  • Target

    RobloxFlingV4.exe

  • Size

    77KB

  • MD5

    a3d8c1ce63a239eda1c0958acd5f106f

  • SHA1

    d9b5899773d4250cfa80605bb3524a01aad462b8

  • SHA256

    7b24d9dc380ea21160d1e5f753b4992cdc1c8ebf8071cf87f31ec7a7be55c035

  • SHA512

    cddeaab7f3441aeaf19cdd5cd9560f42b8e6e95752584b7faa868728fb442becfb069eaade6d69c64eefcd20922f6800c136cebdd2d896fa1add896325c908ef

  • SSDEEP

    1536:entZ0f9nRQFt8jo2r6+RRoXPGLyTsrG96HIU+bml4cfP61Ak8OvdUCUVB:669nRQFt8jNs/vTf+IU+bmo18OF1OB

Score
10/10

Malware Config

Extracted

Family

xworm

C2

success-olympus.gl.at.ply.gg:36156

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RobloxFlingV4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections