General
-
Target
Bloxstrap-v2.8.1.exe
-
Size
90KB
-
Sample
241122-b2rt3sxpcl
-
MD5
14d4016a97613c132cd0f5ef44bb89e5
-
SHA1
6bf013a301f5f18f4948806392f06552295cc71e
-
SHA256
05e8795cc1a3970c8f1175f05f013caffca9feecb7e53bff65c478b94c4fc722
-
SHA512
c0279b287cadc4cf97a454632a9161fd2ca24884e6e9ad8997b92f1781d5a17d137001828c924bc685d1f0ae997a0797189d818ead6d45ea13b20ce58b7329d4
-
SSDEEP
1536:0svC6eOgCMFU9YAOMH+HVFHwMuz8bkX0L9qrtOg3tzQUB/dP3/PKx5eClbm:00reOgJFU9YAOMenHwKkX0BsQEzQsPKG
Behavioral task
behavioral1
Sample
Bloxstrap-v2.8.1.exe
Resource
win7-20240903-en
Malware Config
Extracted
xworm
5.0
127.0.0.1:7000
VbFWnnjtfbUcjrCO
-
Install_directory
%LocalAppData%
-
install_file
FileExplorer.exe
Targets
-
-
Target
Bloxstrap-v2.8.1.exe
-
Size
90KB
-
MD5
14d4016a97613c132cd0f5ef44bb89e5
-
SHA1
6bf013a301f5f18f4948806392f06552295cc71e
-
SHA256
05e8795cc1a3970c8f1175f05f013caffca9feecb7e53bff65c478b94c4fc722
-
SHA512
c0279b287cadc4cf97a454632a9161fd2ca24884e6e9ad8997b92f1781d5a17d137001828c924bc685d1f0ae997a0797189d818ead6d45ea13b20ce58b7329d4
-
SSDEEP
1536:0svC6eOgCMFU9YAOMH+HVFHwMuz8bkX0L9qrtOg3tzQUB/dP3/PKx5eClbm:00reOgJFU9YAOMenHwKkX0BsQEzQsPKG
-
Detect Xworm Payload
-
Xworm family
-
Drops startup file
-