General
-
Target
b5e520b8f9aa8fba0e106406628802faf9fbc927bf2a09aba6270afe3b0a3c4c
-
Size
59KB
-
MD5
13f8ea6f22766a2a3fab7161647b1d00
-
SHA1
af696ffbb96d8dbb29077ab11c4d2f91f73b618a
-
SHA256
b5e520b8f9aa8fba0e106406628802faf9fbc927bf2a09aba6270afe3b0a3c4c
-
SHA512
c0903a9880f4560797fa3dcac362990969529811acdbebf78108ca53a636065d3f1915a73e2a6caa7fc059b2b5561d972b4aa62fdb83d1fe8c4116b2294cd9eb
-
SSDEEP
1536:zDT94NmEa2JFvnkbAqjniRfi6N+yOUtvJ7:vTvEa2JhkbAq+xOcvJ7
Score
10/10
Malware Config
Extracted
Family
xworm
C2
127.0.0.1:9935
additional-ll.gl.at.ply.gg:9935
Attributes
-
Install_directory
%AppData%
-
install_file
solara.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b5e520b8f9aa8fba0e106406628802faf9fbc927bf2a09aba6270afe3b0a3c4c
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections