Overview

overview

10

Static

static

10

rizz.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rizz.exe

  • Size

    62KB

  • MD5

    048352400d332945fe8dbc5c03183481

  • SHA1

    1e475837d941c070e51cd27262a07d020f74dabf

  • SHA256

    d4bf492ddebe96953f2f7b01345a2db570ac311f6533403e103b8c16a323a3d5

  • SHA512

    0a08819c268b6656a1c1757c0b0ed0f0fc2029cdf0fe380668948309748303281ad7e44ccd73563485e6b9bae624bfd292a66f41eb0460705e5735270166ebd8

  • SSDEEP

    1536:uY8A78RZXhdNXhUMXbyhNgao6XZwJENOLMByV:kRxhCMXbyhNfwWNOLMMV

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

submitted-castle.gl.at.ply.gg::16914

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rizz.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections