Overview

overview

10

Static

static

10

Binaries.rar

windows7-x64

1

Binaries.rar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Binaries.rar

  • Size

    1019KB

  • MD5

    9f0a1e5448e276fd9a1868b08261b258

  • SHA1

    bd0e596a0dacba429edc5d06ca23df7a6136682e

  • SHA256

    5d112a86cfba7fc6a1a176b08fb203eb98d103ba95f9edf6adb72c70558f0c96

  • SHA512

    3a81021e2bff42b1e861d791c9f9089853b5d8e44a8b12aa3f2018a6eba55ee3de3f744c75e2021f6570f7712b1dc1589ff1aa52a4804f02f2111dc3de0a2d52

  • SSDEEP

    24576:uc7mwB4VdnJuGYlLS1GmezoXZUnfG4vLjcl7FpOR5wG24q+h:cU4TeVqaoXO+4vv+fORR24q2

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

multi-referral.gl.at.ply.gg:43504

Mutex

L9qlmFNDu8drSdGe

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    SecurityHealthSystray.exe

  • telegram

    https://api.telegram.org/bot7999164804:AAFnlMmOEm_tg1MgP0Rjs4-EAp9cjIouFj4/sendMessage?chat_id=5462166893

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Binaries.rar
    .rar
  • Icons/icon (1).ico
  • Icons/icon (10).ico
  • Icons/icon (11).ico
  • Icons/icon (12).ico
  • Icons/icon (13).ico
  • Icons/icon (14).ico
  • Icons/icon (15).ico
  • Icons/icon (16).ico
  • Icons/icon (17).ico
  • Icons/icon (2).ico
  • Icons/icon (3).ico
  • Icons/icon (4).ico
  • Icons/icon (5).ico
  • Icons/icon (6).ico
  • Icons/icon (7).ico
  • Icons/icon (8).ico
  • Icons/icon (9).ico
  • PROLoader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • RuntimeBroker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ode.bin
  • shell.txt