Overview

overview

10

Static

static

10

SolaraX.exe

windows7-x64

10

SolaraX.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SolaraX.exe

  • Size

    75KB

  • MD5

    bb4297c0a1be56440bc497fb1c276a82

  • SHA1

    71db449f4de9b90906866b830ebdabc12c518c20

  • SHA256

    7df7abdaaabc41cc080678e71723d5a3ef855abe8c154b87e39664640c8be48c

  • SHA512

    a534e7f9107f226d127e0bc8472bb6d35c1eccfd38096ac13f1fb6aef885e52358e6766a604c735a50b0d8f2bb8c9b9bdf1f3e0fa418ccaed5eadadc504deab2

  • SSDEEP

    1536:2MuQthAcx9+rFQCb9Hi/bWPUtb/UVbV6foaOirUpPyUS:7L9+rh0/bWPBVUROirUw3

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:34930

minimum-ball.gl.at.ply.gg:34930
Attributes
  • Install_directory

    %AppData%

  • install_file

    SolaraX.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SolaraX.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections