Overview

overview

10

Static

static

10

3f81d7b9fd...6a.exe

windows7-x64

10

3f81d7b9fd...6a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f81d7b9fd754f15331a5ef322931b07154673d74160c3008b0af32909da996a.zip

  • Size

    17KB

  • MD5

    e0b91c7837ca4d089eebcc81c4c59b86

  • SHA1

    7857f032fef92222d1fa9efebf48a7280ddc1736

  • SHA256

    23617ff5fdcf5eb3e74603190c0e46c0fbdad4b8cf76254de008c4a2e24de73c

  • SHA512

    2b3f5771b938e06f88e2192059b0d83ead6f3057acba668758f1d14025af1e8fad9e76332060b7691cd31dbe94978b6f0bc712e84dd868170e3a44561e26ee57

  • SSDEEP

    384:foItvgN8XExI5grsdL/Fq3gG0HUIlDx4LtoE6e2uhym/X9gDNkxo/H8kRxH8:foItvgN8XEm55/E3gGold86eVD/iNNZg

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Mutex

DzففZ2wp4RHcلي2I

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/yppjG8bz

aes.plain

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f81d7b9fd754f15331a5ef322931b07154673d74160c3008b0af32909da996a.zip
    .zip

    Password: infected

  • 3f81d7b9fd754f15331a5ef322931b07154673d74160c3008b0af32909da996a.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections