General
- Target NicaFPS.exe
- Size 33KB
- Sample260319-ajsg8ae19x
- SHA256 9b37714e6e1acc68b407a47ecc8000bbd5a85b5551a432a8eed14783327b3180
- MD5 184e77cde45a0b01d3f50e4311aabfa5
- SHA1 efbf47508c07fb39360011ff28982ef1f88574d7
- SHA512 c9fd39d86c0602e2ec529845d813e66bd212f352b3a4fcf8f10085553f04aa43f2059cb677c31d6da2d56056893dd76c71fc1cc0d1e923cfca5f551799a6145e
- SSDEEP 384:5Nq1q6y74mir6kZvCctmAVz9gkdXzLKNR0d6lL4gJEUFzHd5ApkFyHBLTnOZwpGX:nV45/1F/KN+S4FOddFyZ9FnqOjhpSlj
- TLSH T12CF25B0977E04326D6EEAFF069B371014675E5179813EF5E0CC4899B6F63BC08A513EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
NicaFPS.exe
Resource
ubuntu2204-amd64-20260126-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
NicaFPS.exe
Resource
debian9-armhf-20260127-en
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
NicaFPS.exe
Resource
debian9-mipsbe-20260126-en
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
NicaFPS.exe
Resource
debian9-mipsel-20260126-en
0 signatures
900 seconds
Malware Config
Extracted
Family
-
xworm
Version
-
5.0
C2
-
ayidhh-48261.portmap.host:48261
Mutex
-
4xkuF6ioTexqAlzb
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
- Target NicaFPS.exe
- Size 33KB
- SHA256 9b37714e6e1acc68b407a47ecc8000bbd5a85b5551a432a8eed14783327b3180
- MD5 184e77cde45a0b01d3f50e4311aabfa5
- SHA1 efbf47508c07fb39360011ff28982ef1f88574d7
- SHA512 c9fd39d86c0602e2ec529845d813e66bd212f352b3a4fcf8f10085553f04aa43f2059cb677c31d6da2d56056893dd76c71fc1cc0d1e923cfca5f551799a6145e
- SSDEEP 384:5Nq1q6y74mir6kZvCctmAVz9gkdXzLKNR0d6lL4gJEUFzHd5ApkFyHBLTnOZwpGX:nV45/1F/KN+S4FOddFyZ9FnqOjhpSlj
- TLSH T12CF25B0977E04326D6EEAFF069B371014675E5179813EF5E0CC4899B6F63BC08A513EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10