General

  • Target

    bMOy.exe

  • Size

    30KB

  • MD5

    35382d2b5f0cbf1adfffd331c144dadf

  • SHA1

    d0e46f8bca36d9af2ea917fbcd082fe63e0bf868

  • SHA256

    71a2fe2a79055b9aca04daaa8288730f1027c0b186e2f10718b21e2d1e89355d

  • SHA512

    1edd391c6dbb92a89407c3cf20a152e57dd1f3172b70164260849091f71685fa6ffdbd31feca2c12928ff7126ebe77d003189fb7479d786ed68a15a00273281b

  • SSDEEP

    384:5eAwIGmeffcbWICWv/0ILZGPch0hYACSqRSMg2uRugtFuBLTIOZw/WVnvn9IkVug:zecbl/b3hMYAoRSF2uBFE9RUOqh/bO

Score
10/10

Malware Config

Extracted

Family

xworm

C2

64.235.61.43:42069

Mutex

MfyggCiMPhVIrsai

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bMOy.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections