General
-
Target
SolaraX.exe
-
Size
64KB
-
MD5
20e42cffe82f2c2a81a6dce44b4c0818
-
SHA1
bbf771622c0b3a330030ed48657d10c305bb758d
-
SHA256
38b88b1fb8c91f62945e62f56a70d7daf7b1a8324f557421bc2414c11f0cd5fb
-
SHA512
b72ffff10c183591f6ec535162d5db1abf8eec02722da7d0229c83fd95e4606c1944d32b32aa82cac73d046c9ff70134df04c202b99dcb2bae53c1c7844c88f7
-
SSDEEP
768:EUqmY0eYr0we/TYUUfBGuMCSarWdrVz9W+bO5DxjFA6sfcTxgOqhQPejExz:EGsMUuBGA1os+bO5NBA6tgOqWPkUz
Score
10/10
Malware Config
Extracted
Family
xworm
C2
127.0.0.1:34155
brand-caribbean.gl.at.ply.gg:34155
brand-caribbean.gl.at.ply.gg:34155:34155
127.0.0.1:7000:34155
26.ip.gl.ply.gg:34155
Attributes
-
Install_directory
%AppData%
-
install_file
SolaraX.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
SolaraX.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections