General

  • Target

    HEUR-Trojan.MSIL.Witch.gen-7fc6a365af13150e7b1738129832ebd91f1010705b0ab0955a295e2c7d88be62

  • Size

    43KB

  • MD5

    6005e1ccaea62626a5481e09bbb653da

  • SHA1

    74138872ec0d0791b7f58eda8585250af40feaf9

  • SHA256

    7fc6a365af13150e7b1738129832ebd91f1010705b0ab0955a295e2c7d88be62

  • SHA512

    4273ab9616a734bcc094528eff78822ed01c8af311cbe66bccd71a7faab67707f7c343a9d1dd717bbdf3202de0aba3be2a161b758dc7775af4406e75680af83d

  • SSDEEP

    768:8nP0rxXmWTdsCmmyhBrI5bP+UGdQkxwyjlO9i9NQdjhw:8PSRPdXCXE5bizxdQ8Mjhw

Score
10/10

Malware Config

Extracted

Family

xworm

C2

139.59.42.121:49258

Mutex

GfvaHzPAZuTqRREB

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

Files

  • HEUR-Trojan.MSIL.Witch.gen-7fc6a365af13150e7b1738129832ebd91f1010705b0ab0955a295e2c7d88be62
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections