Overview

overview

10

Static

static

10

hiii.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hiii.exe

  • Size

    82KB

  • MD5

    471df0297416eb4d460eb23ae23715ca

  • SHA1

    01c40be91002180c4298ecff3368e1006a9a51e8

  • SHA256

    0bd0d98f307f71fb3e4d1e529f43ce88b467e7680e913593c2ded88497c76922

  • SHA512

    86bdb0569a2b6a239ffa2e0f0893fc581f2c9492c81844dc7dabc6e9ee4342ad9c4784a1ede947c882a13fc3d40601fb65e1f6b0c06cc04194e7fd1e8dac56b2

  • SSDEEP

    1536:cIcjOqaGSFhad0wC5FwJH44b9n02hdg6GQ7OeMXth6ddS1EAd8IIZ:waGCnwC5A5b9Fdd7OeM9MXgEA6IIZ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

form-possess.gl.at.ply.gg:43228

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hiii.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections