General

  • Target

    1240-60-0x0000000000400000-0x0000000000410000-memory.dmp

  • Size

    64KB

  • MD5

    5902f2b7a766218a75ea8e9d841e5897

  • SHA1

    1af0941eb8e6ce36ee869ee6cf4f359864b90012

  • SHA256

    a43771e8fc0c9a05a5de219df6f55dd5b63f8321377e9ac7fb2fc7af52825b50

  • SHA512

    2a9dedeec06750ddd6b1eb79518d83611daf95906f8220248daeb0c64d7e7ac20e895122e00c7267c669bdfcde56476ff4bc98bdcaf8914a59eab0868555edcf

  • SSDEEP

    768:cWCQyEbs/oCBkZjd54Uu8jElBCIg9N3hcpkGrye:rt+FBkaUdEl/g9fc37

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Mutex

TU53fgvTBLouBDSy

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

Files

  • 1240-60-0x0000000000400000-0x0000000000410000-memory.dmp
    .exe windows x86


    Headers

    Sections