General

  • Target

    DTUHandler.exe

  • Size

    62KB

  • MD5

    50ab3cf70f82d21a6dc5f7831b30da21

  • SHA1

    46c52df101d0242f47879b0cafdd3f4637eee15a

  • SHA256

    c2850bc1aae930e381b6a334f34428435ed7075117bc03ac88eb0813749c7f7d

  • SHA512

    2d27b18e55616f4af02f1fe4ae8a9404a844516472fd9c321189b1534597629f23c8e5d1e9a8afc88e2a2e7f90bf7a02009813573626181057d75d5c9b00cfc7

  • SSDEEP

    1536:N8lEZfau1tBKmgsSY3l7dEBUc7hubT4bao6qUemaO4C98:iy/IeriUKhubTjaO4C8

Score
10/10

Malware Config

Extracted

Family

xworm

C2

con22.duckdns.org:58554

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DTUHandler.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections