Resubmissions

19/01/2025, 17:36 UTC

250119-v6zj9sykbs 10

19/01/2025, 17:36 UTC

250119-v6jh2syngr 10

19/01/2025, 16:37 UTC

250119-t5adbawrcp 10

General

  • Target

    Nerest soft.rar

  • Size

    10.7MB

  • MD5

    36a311bd68a15d33cf34f2d5a379f575

  • SHA1

    436e425d3a8c52871da0bead8a0935a5c82bb160

  • SHA256

    995b076987f2c8c9217c04b52f4a618dd317d5d5415b3898ba107d12a8e9522d

  • SHA512

    e683aff0d6c77ba47de449f04062c41ad7e30b00768c6d8508f584ead812edd2d0ae4e9d938b8532898ff8f9902676b1163bd387546db6435fb5d19c072a0e08

  • SSDEEP

    196608:x8dOjq6AUN3CFaLgkag0igtXbShm+PH/b1D7Xo0YwYpfn+aA7aPUP/e428iXdC:WT1UN3FLth03Xuhm+PTVN1Yd+b7aPWsk

Score
10/10

Malware Config

Extracted

Family

xworm

C2

back-spots.gl.at.ply.gg:21395

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Nerest soft.rar
    .rar
  • Nerest sofr/!LOADER.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Nerest sofr/bin/!LOADER.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Nerest sofr/bin/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    776334619bd19ec23e3a7a275473b5a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Nerest sofr/bin/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    72b8c869f01047191838df5f58e88dd8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Nerest sofr/bin/HD-Adb.dll
    .elf linux x64
  • Nerest sofr/bin/Newtonsoft.dll
    .elf linux x64
  • Nerest sofr/bin/adb.exe
    .exe windows:6 windows x86 arch:x86

    e6e69030c3a33898b09715b432c51499


    Code Sign

    Headers

    Imports

    Exports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.