Overview

overview

10

Static

static

10

bMlo.exe

windows7-x64

10

bMlo.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bMlo.exe

  • Size

    30KB

  • MD5

    074d7f8b1506cfdbc009b3337397b709

  • SHA1

    4a33548c53d878aa6498858807f885905faf6701

  • SHA256

    8bda780a072d94dd86b16e46553d2ee9e421d70cac35172095e04fa93b4ee778

  • SHA512

    3d56204f1d448340273a37d0e01fd40720b59373492996931a433d279f221ed147f2e0c6b1497ff8ad17b90bea82be547fb0c964997345fcaacf22c5d4531fd5

  • SSDEEP

    384:veAwIGmefcZWGl3nxe0XLZJkpJqXlYECwaiU4sbRugtFuBLTIOZw/WVwvn9IkVui:lHZrtxekwo1YETD9sbBFR9RuOqh8b7

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

18.231.156.119:7000

Mutex

c8fAqAAAZFA3VKKn

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bMlo.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections