Resubmissions

19-01-2025 17:36

250119-v6zj9sykbs 10

19-01-2025 17:36

250119-v6jh2syngr 10

19-01-2025 16:37

250119-t5adbawrcp 10

General

  • Target

    Nerest soft.rar

  • Size

    10.7MB

  • MD5

    36a311bd68a15d33cf34f2d5a379f575

  • SHA1

    436e425d3a8c52871da0bead8a0935a5c82bb160

  • SHA256

    995b076987f2c8c9217c04b52f4a618dd317d5d5415b3898ba107d12a8e9522d

  • SHA512

    e683aff0d6c77ba47de449f04062c41ad7e30b00768c6d8508f584ead812edd2d0ae4e9d938b8532898ff8f9902676b1163bd387546db6435fb5d19c072a0e08

  • SSDEEP

    196608:x8dOjq6AUN3CFaLgkag0igtXbShm+PH/b1D7Xo0YwYpfn+aA7aPUP/e428iXdC:WT1UN3FLth03Xuhm+PTVN1Yd+b7aPWsk

Score
10/10

Malware Config

Extracted

Family

xworm

C2

back-spots.gl.at.ply.gg:21395

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Nerest soft.rar
    .rar
  • Nerest sofr/!LOADER.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Nerest sofr/bin/!LOADER.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Nerest sofr/bin/AdbWinApi.dll
    .dll windows:6 windows x86 arch:x86

    776334619bd19ec23e3a7a275473b5a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Nerest sofr/bin/AdbWinUsbApi.dll
    .dll windows:6 windows x86 arch:x86

    72b8c869f01047191838df5f58e88dd8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Nerest sofr/bin/HD-Adb.dll
    .elf linux x64
  • Nerest sofr/bin/Newtonsoft.dll
    .elf linux x64
  • Nerest sofr/bin/adb.exe
    .exe windows:6 windows x86 arch:x86

    e6e69030c3a33898b09715b432c51499


    Code Sign

    Headers

    Imports

    Exports

    Sections