General

  • Target

    Raven Tools.rar

  • Size

    71KB

  • MD5

    915a2f4033bc591e17e189c114250319

  • SHA1

    c23019cb04a5511b4a115ad505f2322913937f0b

  • SHA256

    efb842c17bea010e0b056d48d076e66c3ef742f4c7c546d12d36dc80b88bf149

  • SHA512

    206a067c890bfe1aae1f9cb6c1f341031edb5b9441c5630f75ffef40645a3289780c7f75821f6a25c3d6f0af91febae29090cafe36bc99ffa50e14b45e7d65e5

  • SSDEEP

    1536:iCnHag5SdayRxuI0aVTmIylGL1B6Q+YDaDQNoYlJwK0Z8:iCXsv3u0KKBOJ0u8

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Raven Tools.rar
    .rar
  • Raven Tools/README.txt
  • Raven Tools/Raven Tools.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections