Overview

overview

10

Static

static

3

xtsle.exe

windows7-x64

10

xtsle.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xtsle.exe

  • Size

    903KB

  • MD5

    8555e55165d3cda3bb72d6f7a0693a69

  • SHA1

    300eaed89a5d8edea974a7118655fe919ba5abff

  • SHA256

    88bd9484b884ae95a3df7310d69e76872f3de844c1c6e45639e464b38a8a805b

  • SHA512

    db212f7ffe972b1cb2069e57dece38bc72410c2dc196ee659b60454ea1c00dc3900d6a31d2f4b7ab79f1f1d82c147c957e4b38873960ac353a1bbe8fc36e9320

  • SSDEEP

    12288:1tCXUjIKWxqiJJd0RA89Em2AYpBs+AsSiFd+BtdCxCQjlMs/xv78pEOBl:1tCXUjIJJJdr8RY+cj6tdeMs/R8yOj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xtsle.exe
    .exe windows:5 windows x86 arch:x86

    bf95d1fc1d10de18b32654b123ad5e1f


    Headers

    Imports

    Sections

  • $TEMP/Griffin.midi
  • $TEMP/Pre.midi
  • $TEMP/Proc.midi
  • $TEMP/Pubmed.midi
  • $TEMP/Vocal.midi
  • $TEMP/Walnut.midi
    .cab
  • Amanda
  • Approximately
  • Distributions
  • Impression
  • Inspector
  • Jade
  • Mapping
  • Ruled
  • Sustainability
  • Teaching
  • Teddy
  • Tm