General

  • Target

    Vbucks-gen.exe

  • Size

    229KB

  • MD5

    6b8f6f416051d2947c802eeb3710077b

  • SHA1

    02f986ff007d5867d1d638f72c61e7231c0374d2

  • SHA256

    05026b12b16aa7ffb8aa35c47e1d967b17459eb313f443dfaffd528842df5ba2

  • SHA512

    0ea970a737ca8d49af5d1008eb254027d939aea1d98af5b8bdae2b092279c2420b1c52f49becda0f23f955e02fbf33c4a78af74935cf94743f553bad6db64480

  • SSDEEP

    3072:y85g8Zl3CCzlgJQmzcAkWENrrlKVAvYkzQfQj7oIhGwubdjdhO9dRgeX77fizS:jpZlSIWpqnloO9oqgbLsAeX3az

Score
10/10

Malware Config

Extracted

Family

xworm

C2

192.168.0.197:9999

Mutex

7u0t4YhJyvkbGmU0

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Vbucks-gen.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections