General

  • Target

    Spotify.exe

  • Size

    90KB

  • MD5

    651de6b11fe16d02e65a6eabcf035ccd

  • SHA1

    919489c1bfc03f1a663faa1bfaa40158273c68c2

  • SHA256

    7c73eb4b0243d64b99afc505c0fbcce782b30c8a17836cde75b6ea2ae6d584bd

  • SHA512

    7004f83c7b93451ce47dc09c9fab4be054da692ae514cae9cb7af6353e60693f5778ade102c3f5db6b55d8db677473d66e7fb722f76d61a544b2f0a8749be1d0

  • SSDEEP

    1536:qKxRGBMWpZN2tp1Oap/Oo5DtbZmUsepYyys411Ln:qKxR8MWfgtp1Oemo1tVmUDpZyz

Score
10/10

Malware Config

Extracted

Family

xworm

C2

design-utilize.craft.ply.gg :61572

Mutex

sfrJrYYDGFiuYN6c

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Spotify.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections