General

  • Target

    000exe.exe

  • Size

    52KB

  • MD5

    89d67189224fd60f77f1e52b2e034121

  • SHA1

    e000172d355901aed51e44c758ab5eb83236ba23

  • SHA256

    75137109b086bda82e60db19f97f6c5a8fb8ac0af2f5aecd23e81935a60f65dc

  • SHA512

    bbebd1d507dac9e898bd55f134eb0a0c2e09de6f08c252f34cd69abf5233fb476575b2996b07264c111e8d7bbd6e87fd55e9fb41148a1c5d6a9fe9f8d525f3f6

  • SSDEEP

    768:DcepfyWScfuJP+07SsAYPugXDKwAgzb/sCIWLID7yOCRh/9sdkmA1uaHiO:AufcPNNdugzb/sCIvDWOop9seuOB

Score
10/10

Malware Config

Extracted

Family

xworm

C2

209.25.141.2:43784

Attributes
  • install_file

    ctfmon.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 000exe.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections