General
- Target keepon.exe
- Size 436KB
- Sample260809-wvv85sbn3v
- SHA256 c2214a8b8c88c91a009891f3f10bbb2d8aa18a15580bd12c82dfcf2477f0c846
- MD5 61d549ebce2645dc8f147e0fa01baa2f
- SHA1 5db72447c6841a9faef887ad4b8bdb4c4016916b
- SHA512 5507ecb80760b30ce1e58a0638328ed7586c931e5a030659a29a94becafd4066c51bbef33bd77ffbd5e767c21bcba22787f03a915640d7d0ff64a9bf18eb7d8d
- SSDEEP 3072:hJvcJP9R2JOKGx3pKbCyQ3pdnSp/jY7CVgo2shPcLGGdyhUafbN0nWUM+MtSI/zG:sJP91kGN5QNV/hELGaq2WSw+G+vaW
- TLSH T18B94B1590AEA3C10DC9FC52DA76E7DAC4392034A5A0274EA06FF4C58673D6CF21E5DCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
keepon.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
xworm
C2
-
209.145.51.44:7000
Mutex
-
qaA60TVolmeexQD8
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
- Target keepon.exe
- Size 436KB
- SHA256 c2214a8b8c88c91a009891f3f10bbb2d8aa18a15580bd12c82dfcf2477f0c846
- MD5 61d549ebce2645dc8f147e0fa01baa2f
- SHA1 5db72447c6841a9faef887ad4b8bdb4c4016916b
- SHA512 5507ecb80760b30ce1e58a0638328ed7586c931e5a030659a29a94becafd4066c51bbef33bd77ffbd5e767c21bcba22787f03a915640d7d0ff64a9bf18eb7d8d
- SSDEEP 3072:hJvcJP9R2JOKGx3pKbCyQ3pdnSp/jY7CVgo2shPcLGGdyhUafbN0nWUM+MtSI/zG:sJP91kGN5QNV/hELGaq2WSw+G+vaW
- TLSH T18B94B1590AEA3C10DC9FC52DA76E7DAC4392034A5A0274EA06FF4C58673D6CF21E5DCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload