Overview

overview

10

Static

static

10

SolaraX.exe

windows11-21h2-x64

10

Resubmissions

02/03/2025, 00:30

250302-athe1ayjt4 10

02/03/2025, 00:13

250302-ahymvaxpt9 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SolaraX.exe

  • Size

    80KB

  • MD5

    d80d50b89892b3e8c3114fe4044df4c1

  • SHA1

    c2853b4e989f698148fe09c317895d5da073bdf3

  • SHA256

    30baa00474cb42d9587213111d41fe3aa906684c636a6df02de95dcbd89921d6

  • SHA512

    3a25e6b9bf6f792dd25ed0d3da81504d5b2963ac060fbc62bee1767d6d760105649f5f3e7d357fa14c140d1eb716712e83a190cee489cf70edc71d31ce8855d1

  • SSDEEP

    1536:GaapelDMF79xxpx+d+bJ6813qTBOv4O6PzO+EXPNUE:kYSRLxpEd+bJaBOMzO+EVp

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:34155

brand-caribbean.gl.at.ply.gg:34155

brand-caribbean.gl.at.ply.gg:34155:34155
Attributes
  • Install_directory

    %AppData%

  • install_file

    SolaraX.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SolaraX.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections