Overview

overview

10

Static

static

10

OOKetNUn.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NeverloseCrack (infected).zip

  • Size

    39KB

  • MD5

    269009b51d321a9d821a5b2e7b0fd444

  • SHA1

    c60443ae8cb2162ace9af6d8c3bc3e63ce1ac3df

  • SHA256

    c6ee0fd2b511f01ced2be0cd78d5751886e2f1540d39981238ca3d48cd750bca

  • SHA512

    09afa04d4bff4df60295f961803aadaff43539b7b85df8f063e97c247022a6cc0632b0ff57c1b5cafbdb55198a892d22abb727e2524c582d33b4e4ce7e39534d

  • SSDEEP

    768:x8o9UOrxTUoO0lJFotq2TK7wxE0ISLr8/LeMgug8pmdIsX/6l3:yo9U+xmze7wxE9Z/LePug5dTPc3

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:2501

local-josh.gl.at.ply.gg:2501
Attributes
  • Install_directory

    %AppData%

  • install_file

    Expencive.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NeverloseCrack (infected).zip
    .zip

    Password: infected

  • OOKetNUn.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections