General

  • Target

    nerest.exe

  • Size

    61KB

  • MD5

    e2f4633e3effce36ddcbd83ea3ff7834

  • SHA1

    ee5390249a715c415a2b91450e1ff3059dcc5f0c

  • SHA256

    be5bc874511f4713385e40e7b8e1f8d57ee58ba6a25d959fa83739eaf3137d41

  • SHA512

    18afe4ad52dedd1600be8e1ce432cc80e79f6a7a472204a794986b22b12fc9831a360e73036e7a15277929d8fec0a5340dcda555a11be65223ec4965fdfa07de

  • SSDEEP

    1536:LHlznYyP4mGgRLHxDkbmakqJtF6qcDROdE8OQ8JZ:zlzvPFGgpVkbmClc1OdrOQ8JZ

Score
10/10

Malware Config

Extracted

Family

xworm

C2

info-power.gl.at.ply.gg:23360

Attributes
  • Install_directory

    %AppData%

  • install_file

    chrome.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nerest.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections