Overview

overview

10

Static

static

10

New folder....0.exe

windows7-x64

7

New folder....0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New folder.rar

  • Size

    46.9MB

  • Sample

    250308-w1n21s1kw6

  • MD5

    b5e8be6130a74993d74c5544854e28e5

  • SHA1

    fd3658985744f044429956d6e7a4bb31170945d2

  • SHA256

    8226e9367565a7455d21a1ae8249766acb49949e5353abe3009a68b62cdc504c

  • SHA512

    c972567539ef61b0674b85b59220965a4d615b553499e409a55a0e8ef30418cb10f2187e4e525e6267afadc0bee6d79ffb4dd277dbd05be441561c2a5ab8ad5d

  • SSDEEP

    786432:xs35cJJfXpamVV8f/IDrIKKBfUTbBB7MoiWq0UuX24lrEJ6OqnchsW7DkseJAQ0P:O35cPfpamVJxEUTbf7Mo+7uXBG6Oqncx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.0

C2

147.185.221.26:3333

Mutex

x5HokpexeOtoNIFY

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Targets

    • Target

      New folder/XWorm V3.0.exe

    • Size

      7.1MB

    • MD5

      71b0bb52ae4137c3e40dc802711e2acc

    • SHA1

      e154869a5725806c2b12866479be8cf326d52116

    • SHA256

      d1b0cb76d6ff1e54e5669cc3ba76ba6224be19e721cc61a9e223a596a9bb332f

    • SHA512

      eea4513a347d9b2a5ee700388c34d9677869702384128b57e3299cff277b585fd713f4b44830c79da2b74ecc138d99c8aec9b4757d9dda6d3fa475a1dfdb6588

    • SSDEEP

      196608:rJNE1b0RkLZvaU6ScXc4sqgCzlMNxKa+M9:rJt4vKSoiqgASNUP

    Score
    7/10

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks