Overview

overview

10

Static

static

10

disconnect-cat.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    disconnect-cat.exe

  • Size

    232KB

  • MD5

    6f3181b822774b93d128e14fbdb3d21b

  • SHA1

    f3a02eae8ea55911e2b748110df39d772fcf7614

  • SHA256

    cc39249ab312be84a7b41a2ec9670abe3bc99e2e4268d3687325177dbd8ac1b1

  • SHA512

    83d203d1368c9228f700388051f6897aa8d92f24efa9945189c0f3853c36f9d4d2bf2500ce6cd864e23ce7a3dcc021badf8379eeb7e95061e3da60135cfd555f

  • SSDEEP

    1536:3rZP19q04l8xn7QYM1bKw+/qEuCV5b7Gkmu01R5qOjiCz9mDdquc:VMl8xnS1bKjpPPqn/5qOjic99L

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

https://pastebin.com/raw/MdNNLDrU:1

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    msconfig.exe

  • pastebin_url

    https://pastebin.com/raw/MdNNLDrU

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • disconnect-cat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections