General
-
Target
d2b430a0c74ef2bd97c86d95c35fe964bd00ed17d2e6542be33cc7c99def9d5a.exe
-
Size
57KB
-
MD5
90a6868b7ce2020387d453aa38668584
-
SHA1
7bde411bb0d7b6aa7a020266a61ce0d61ef0b362
-
SHA256
d2b430a0c74ef2bd97c86d95c35fe964bd00ed17d2e6542be33cc7c99def9d5a
-
SHA512
243c6010cbee28f5181383565a00c22375828f8b5293d35d9512adb249a4fadfd04eab3fb7b9789d6e1bea39f1cf513439e0f7d72ecb69e00a16e8f6d7f0efcc
-
SSDEEP
1536:Liu7HktvnRa+lZrOY/FJ9N76iOCweg662XkhiYYtG:LiftnZCgFJ9NTOCql2XkUYYtG
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
hardware-bands.gl.at.ply.gg:63257
Mutex
GRHeRJRFnCzlkxGI
Attributes
-
Install_directory
%AppData%
-
install_file
DiscordAutoUpdate.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d2b430a0c74ef2bd97c86d95c35fe964bd00ed17d2e6542be33cc7c99def9d5a.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections