General

  • Target

    Sparkle_Builder.exe

  • Size

    42KB

  • MD5

    6b9a33e31eca732c11ddf1098117be7e

  • SHA1

    660850580be94f337af4ca601236f4b6a1ee5d4b

  • SHA256

    81df1f9c18f36fe45c7038a16f40a4b6c843b7c1702f4778a91d571485e23a1b

  • SHA512

    a604f5996290a71bb044110f748a54e8dbab195933f45b6b45d51f5144993979dad23d2dadf927780f8b4a04185c920dedcd993ababf858b99c912185dd64159

  • SSDEEP

    768:/WCQyEbs/oCBkZjdS4Uu8jEl/CIg9N3hcheQryOr:ot+FBkpUdElJg9fcfLr

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Mutex

oFXKcYhjCK5LLw35

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

Files

  • Sparkle_Builder.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections