General
- Target Xeno.exe
- Size 59KB
- Sample260905-bbd6as1sh1
- SHA256 e019e008b3b401a274217cc6a00efa0f4430167e5b5c7bd7e6bed017ceb1dfb4
- MD5 9cc3fd7e57b573dd7e5958473e960e76
- SHA1 5f8a5872332254b19a4a458fca9bbbd2235a834a
- SHA512 8c957d37b9555b317bf5ec9d7d85f886ceafaf5e126ca2a73606910953c25ac02c2d8e003d0eaa74270081d3ab22ab4caad61de790e5844bbc3e77f8d6ae89ec
- SSDEEP 1536:MCtNbEJtBiZwY+vj1ltV0MzkbDU0cBQ8Og2bEtEV:ZtVine+rxq+kbD6BLOg2bHV
- TLSH T199437D1977E24126D1FE5FF059F221129636FE239812E65F28C4768B1B33E89CD807E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
xworm
C2
-
185.144.70.31:6532
Attributes
-
install_file
autorun.exe
-
localhost
127.0.0.1
Targets
-
- Target Xeno.exe
- Size 59KB
- SHA256 e019e008b3b401a274217cc6a00efa0f4430167e5b5c7bd7e6bed017ceb1dfb4
- MD5 9cc3fd7e57b573dd7e5958473e960e76
- SHA1 5f8a5872332254b19a4a458fca9bbbd2235a834a
- SHA512 8c957d37b9555b317bf5ec9d7d85f886ceafaf5e126ca2a73606910953c25ac02c2d8e003d0eaa74270081d3ab22ab4caad61de790e5844bbc3e77f8d6ae89ec
- SSDEEP 1536:MCtNbEJtBiZwY+vj1ltV0MzkbDU0cBQ8Og2bEtEV:ZtVine+rxq+kbD6BLOg2bHV
- TLSH T199437D1977E24126D1FE5FF059F221129636FE239812E65F28C4768B1B33E89CD807E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload