General

  • Target

    jango.exe

  • Size

    51KB

  • MD5

    c81e5ecd50fda5d5162ce5c920bfad15

  • SHA1

    7b8929cf91b1cec30ca058117a2fade8d853cef6

  • SHA256

    02aa8d694fcb141522227f5890d5750d3759aa3ed20d6fd6d124d867db894186

  • SHA512

    0bce58d5d1ce40b1983ca2817cac5b64be87c72da46714482e010b8c7a25ae2c0c86548174afef0c0855825fbba98a62d8634cf89f29ceaf90d4ef16acfce7d0

  • SSDEEP

    1536:K7c2/5rEItNHHc7lwKDjXgebhO+YZbWwAXWvO3kP0y:K7c2/5rncxFHXgebhOdZbWXWvO3ksy

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • jango.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections