General

  • Target

    bMPn.exe

  • Size

    34KB

  • MD5

    f8fcfc2a0ff2705850a6c1f3b5723a60

  • SHA1

    2e0551f83daaf839c762fd3da6247fc10e865d09

  • SHA256

    56cb88ddc8d67d64ee731b0d0d43e70ea607f052a472fac15de7be59a9848e38

  • SHA512

    ff4339943068cac2cdd7fa87a53459aea33c5ec0246ea918248b1eec695515374dda5b958cd9ed32b9b7a4523a09b0d0a5ca258193a402a6133e56939f31c5b0

  • SSDEEP

    768:TTcATS5Ity8aSNIOFM9J3O9hISAsRbyQ:T42xLNrFM9J3O9uARbr

Score
10/10

Malware Config

Extracted

Family

xworm

C2

64.235.61.43:42069

Mutex

MPWEPJ69jAntjLcj

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bMPn.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections