General
- Target MTASA_SPOOFER__SERIAL_CHANGER_V1.0.rar
- Size 16KB
- Sample250803-lpmppsck6w
- SHA256 ddc8492f4d044b6d7fbbbdb3c705b2847503ed47a7bf2665dec46ab6ed508152
- MD5 0784128738a4b47cb6a10f99414a1c48
- SHA1 783a56aa1d69b0e457709178a8ef576fdcca6e72
- SHA512 635d517910c4e5997e9e6e1dd3c5bb9b261568d3d14fc8fbbd12582939408bbeb1b021927610e6ac3f4a63b78e01c725f9514811677551f6139527e76b7b1d9c
- SSDEEP 384:CxudtpX1Q0OTZCnFg6XuMqAV/1kVsD8L7enrGERQClrcbH:CxGpFQHQnFgEjD8L7yrGucbH
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
MTASA_SPOOFER__SERIAL_CHANGER_V1.0.rar
Resource
win10v2004-20250502-en
Behavioral task
behavioral2
Sample
MTASA_SPOOFER__SERIAL_CHANGER_V1.0.rar
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral3
Sample
MTASA_SPOOFER__SERIAL_CHANGER_V1.0.rar
Resource
win11-20250610-en
Behavioral task
behavioral4
Sample
MTASA SPOOFER SERIAL CHANGER V1.0/aZSYX0s1qnq4y7R.exe
Resource
win10v2004-20250610-en
Behavioral task
behavioral5
Sample
MTASA SPOOFER SERIAL CHANGER V1.0/aZSYX0s1qnq4y7R.exe
Resource
win10ltsc2021-20250619-en
Behavioral task
behavioral6
Sample
MTASA SPOOFER SERIAL CHANGER V1.0/aZSYX0s1qnq4y7R.exe
Resource
win11-20250610-en
Malware Config
Extracted
-
xworm
-
5.0
-
monstr.ddns.net:1177
-
hrrlp3UG4oHVSl9q
-
Install_directory
%AppData%
-
install_file
RuntimeBroker.exe
Targets
-
- Target MTASA_SPOOFER__SERIAL_CHANGER_V1.0.rar
- Size 16KB
- SHA256 ddc8492f4d044b6d7fbbbdb3c705b2847503ed47a7bf2665dec46ab6ed508152
- MD5 0784128738a4b47cb6a10f99414a1c48
- SHA1 783a56aa1d69b0e457709178a8ef576fdcca6e72
- SHA512 635d517910c4e5997e9e6e1dd3c5bb9b261568d3d14fc8fbbd12582939408bbeb1b021927610e6ac3f4a63b78e01c725f9514811677551f6139527e76b7b1d9c
- SSDEEP 384:CxudtpX1Q0OTZCnFg6XuMqAV/1kVsD8L7enrGERQClrcbH:CxGpFQHQnFgEjD8L7yrGucbH
- MD5 SHA1 SHA512 SSDEEP
Score10/10Detect Xworm Payload
Xworm family
Drops startup file
Executes dropped EXE
Adds Run key to start application
-
- Target MTASA SPOOFER SERIAL CHANGER V1.0/aZSYX0s1qnq4y7R.exe
- Size 34KB
- SHA256 4380d2bbe9f643e4cb096c64e63a743d58d655ba4a93993128ff56ed0babe265
- MD5 081ee30547b13150c01909b0bd20c106
- SHA1 da5427bf5ce71e022a4be45cd1a18dbf3de1957c
- SHA512 e05cd290a91f52f737902ca8eac1799ae71e85ba82b89517641eab2a57841f7b9cc587f4f9d3f36bba0293e96d498dc2a2ddd5c5a40a8fc42b4ff802b097913a
- SSDEEP 768:CHqIHV3vI2TW/PV8m59FS9YOOjhM/dY7:Ch1QdV8mnFS9YOOjK1Y7
- MD5 SHA1 SHA512 SSDEEP
Score10/10Detect Xworm Payload
Xworm family
Drops startup file
Executes dropped EXE
Adds Run key to start application