Overview

overview

10

Static

static

10

Gorilla tag.exe

windows7-x64

10

Gorilla tag.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Gorilla tag.exe

  • Size

    429KB

  • MD5

    a47502d0bdaa67d14c762565ee7864d6

  • SHA1

    afed9a6ac84e97bbd2dc2593ff6204716e696695

  • SHA256

    20ba1d60db4e5d51a698d7ab07e8a5dd75cd6aaae792c76dda315d757b9dfdde

  • SHA512

    dae6c201c878da5438a58bc6258cb7287ddfbf002c01c0a13deb4039a4fe5e8a85be04c57367f56de4ac26ae0a3fb0d166b27e06de354bf3b2efd38af5c636e9

  • SSDEEP

    6144:BkGb8qJ+GIIIIIIIhIIIIIIIIIIIIIIIUz9bfF/H9d9n:BRC9

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

est-review.gl.at.ply.gg:21148

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Gorilla tag.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections