General
-
Target
Image logger beta.exe
-
Size
297KB
-
Sample
240629-yd3yrsthrc
-
MD5
f6bc727b25a9d6d15f62d459f2d875d0
-
SHA1
a7502f6990fc98c4f634ec3e995cc7f443487b13
-
SHA256
04f28f4975a7ff3cb3439b65b8d2fad8e99e3431b65be0e065c194908459790e
-
SHA512
b0847c9b037ad9f2cffee62cd6f3193580e4e0950d0a3a1fbf6611df42474a511d30065f41cbdbaaf4360a6c61719b7d3f10692efac762d1a80f6311d42eb12a
-
SSDEEP
1536:vB5uVw89wt2v7Fz9fyOjAEx93MDbT0f5aX2:v++tov7Fz9fyOjOQxK2
Behavioral task
behavioral1
Sample
Image logger beta.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Image logger beta.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
xworm
5.0
modern-educators.gl.at.ply.gg:23695
lu0xD4CO1T8ycPIn
-
Install_directory
%Userprofile%
-
install_file
USB.exe
Targets
-
-
Target
Image logger beta.exe
-
Size
297KB
-
MD5
f6bc727b25a9d6d15f62d459f2d875d0
-
SHA1
a7502f6990fc98c4f634ec3e995cc7f443487b13
-
SHA256
04f28f4975a7ff3cb3439b65b8d2fad8e99e3431b65be0e065c194908459790e
-
SHA512
b0847c9b037ad9f2cffee62cd6f3193580e4e0950d0a3a1fbf6611df42474a511d30065f41cbdbaaf4360a6c61719b7d3f10692efac762d1a80f6311d42eb12a
-
SSDEEP
1536:vB5uVw89wt2v7Fz9fyOjAEx93MDbT0f5aX2:v++tov7Fz9fyOjOQxK2
Score10/10-
Detect Xworm Payload
-
Drops startup file
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-