Overview

overview

10

Static

static

10

steam.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    steam.exe

  • Size

    304KB

  • MD5

    6dd8012ed786bb6bd4a4242bee740013

  • SHA1

    1bc4a05329bb192602c041c8ca3537ca291a38f0

  • SHA256

    ee80ef1569a303b01f6d9fe4c6a3ca3940b5c0171ca285ee9eefdce70f5d1f12

  • SHA512

    78800a5e8dcfdfe2655c1590d3548e62f3db1ba7c2a57f4cda99513a405e8c4d6dbf2a2e0826272d981f4dafc5542120f935ff1d18661bef89e98b8ca31e76c8

  • SSDEEP

    6144:0zrI6x9U+GIIIIIIIhIIIIIIIIIIIIIIIU:oUC

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

sazgig.ddns.net:37467

Mutex

mC1gvmENdCt930af

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    minecraft.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • steam.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections