Overview

overview

10

Static

static

10

LibraryDownload.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LibraryDownload.exe

  • Size

    171KB

  • MD5

    0f4733702f7441130c76f92271e33d52

  • SHA1

    962c64538ad4b11b0a57a269e726476eaf1e5cd4

  • SHA256

    b96640cb2a36f9bbaf48fe4798091068b9f518af783236e759763f2386f6a157

  • SHA512

    3718e10cdbb2dd1089a3cc4437c0884593ed0194953e0e0d6865b33475ffd2d8b9bcdffe5e8fade78eb4078b6777ca65618617a2563007b77998c273d85be0f5

  • SSDEEP

    3072:vOMQnN3iDf+bpT7E3ubGoOmaG8vwps/Bz65/M6If+3Js+3JFkKeTnu:vOnxwWboub+As/xBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

designed-paragraph.gl.at.ply.gg:6553

Attributes
  • Install_directory

    %AppData%

  • install_file

    OneDrive.exe

  • telegram

    https://api.telegram.org/bot7632521130:AAFUdxmN095QSre97Sy3YKm36m78BuQCg7g/sendMessage?chat_id=6370415730

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LibraryDownload.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections