Overview

overview

10

Static

static

10

MicrosoftAccount.exe

windows7-x64

10

MicrosoftAccount.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MicrosoftAccount.exe

  • Size

    69KB

  • MD5

    60efdd9e1cf39dd0a3a7fbdeb6a2d391

  • SHA1

    29dbc62cedd344c115047fcec30f83e81c6d794c

  • SHA256

    5ad2e8363c51cc2392e5ea5c34fd426d585c118a1010cd034ccca53cb9aea8b0

  • SHA512

    c070114f7bbc384b5362111a70f1a910ecbf08b909d9e7b4222c904c221a107494e38840f5bc443faee8822281c5d46d65c7970003b7b625e7d1488ce6d58b84

  • SSDEEP

    1536:fl/VpCz5Iqc+28akCkj42kbOOhW8DS6qfRtFAO5ZPYC:fldN8ak9kbbI8ot2O5ZPx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7703

147.185.221.25:7703

regarding-states.gl.at.ply.gg:7703
Attributes
  • Install_directory

    %AppData%

  • install_file

    ApplicationFrameHost.exe

  • telegram

    https://api.telegram.org/bot6353034618:AAHzEkRGIc7NNoV5QuVXoAVVOMmU4ikzPYc/sendMessage?chat_id=1735841155

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MicrosoftAccount.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections