General
-
Target
PornoK1d.exe
-
Size
150KB
-
Sample
240629-3fkmesyhmd
-
MD5
bfe2ce9a03e202907315519a601ec49c
-
SHA1
6c5b3c5d0628a5f59cad599ff5a5284a3ce9ef27
-
SHA256
f23d6c7169a3df4e47c6773884b98507e145ac38ca007aed55e45b72565b9dba
-
SHA512
aec9ab17e52479cbe594a4318f3ed5b6480610a1a827ffb8e29d8a43cb5538ea36997bc5b5dde51a25483bbbd74bed075fad58c6602226279ee647ba08efecee
-
SSDEEP
3072:ek2csT/8rJFf9HxOMo4NpVq8BxFRzaqF+o2GQJ7/JzqVfGv1:eDT/uf9QgVqwlL
Behavioral task
behavioral1
Sample
PornoK1d.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
PornoK1d.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
xworm
5.0
york-latinas.gl.at.ply.gg:51154
bhDm93QvQg6Pocut
-
Install_directory
%AppData%
-
install_file
USB.exe
Targets
-
-
Target
PornoK1d.exe
-
Size
150KB
-
MD5
bfe2ce9a03e202907315519a601ec49c
-
SHA1
6c5b3c5d0628a5f59cad599ff5a5284a3ce9ef27
-
SHA256
f23d6c7169a3df4e47c6773884b98507e145ac38ca007aed55e45b72565b9dba
-
SHA512
aec9ab17e52479cbe594a4318f3ed5b6480610a1a827ffb8e29d8a43cb5538ea36997bc5b5dde51a25483bbbd74bed075fad58c6602226279ee647ba08efecee
-
SSDEEP
3072:ek2csT/8rJFf9HxOMo4NpVq8BxFRzaqF+o2GQJ7/JzqVfGv1:eDT/uf9QgVqwlL
Score10/10-
Detect Xworm Payload
-
Adds Run key to start application
-