Overview

overview

10

Static

static

10

Redux Mak.exe

windows7-x64

10

Redux Mak.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Redux Mak.exe

  • Size

    153KB

  • MD5

    0cc3fd04d8c5f1d8bc962a0043201b7c

  • SHA1

    2bfeeda6d3c2e9b25c0a4316f5b0cf298b4a9ff3

  • SHA256

    93d76dca61ee80316248681350c8821c9659e78cde71066aeb85a680bea2add3

  • SHA512

    3a1b11e4dc241a2ff5d1da38fd9fadbcc67eb82539ea1e8549835efa7f4247b77928e38daea234d0ae6bf5b9ba866d7de41de7ee37e2418f8640be637f5f0ca2

  • SSDEEP

    3072:NmhnDsFs9CfOM/4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvk:NgDWs9GgVqwlL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

entertainment-rentals.gl.at.ply.gg:39424

Mutex

loMU85ScF1qly5lk

Attributes
  • Install_directory

    %Temp%

  • install_file

    Set.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Redux Mak.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections