Overview

overview

10

Static

static

10

Midnight.exe

windows7-x64

10

Midnight.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Midnight.exe

  • Size

    73KB

  • MD5

    af9ff800562a87e5121cad94adb74471

  • SHA1

    ccadb2b20a7ee0cffeffed04e415ca131a7c41bc

  • SHA256

    7bcff120e45739b923e684e9c246e4c650cdfe3e5fe51399cfba6bcf932bd246

  • SHA512

    004d275549a7c0b8ba717a46c9a9b80ecc442db6dd868384a17ba797f1db8a64d6198317ffd28ca619c8fe3ffebb934eb9cb9b60486e8e5c79563206c9aaf892

  • SSDEEP

    1536:q2H3hrFnT3fdHC0+aasbh0bkkNB/cxbRH6TTpH4ONThXiA:nXffdDznmbklxbCTpYOBhSA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:56698

true-lung.gl.at.ply.gg:56698
Attributes
  • Install_directory

    %Userprofile%

  • install_file

    svhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Midnight.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections