General

  • Target

    Stand.Launchpad.exe

  • Size

    105KB

  • MD5

    2889bfc660bae6bf0f9166136be2559e

  • SHA1

    474e3f337d24a9728ebe614a1862da52e11e5b23

  • SHA256

    e4d5bcd0b849c43f5dff5f6b323001915944b1a179ee0e1788184bb178896368

  • SHA512

    2000f5a0c757ae90dfe3cf80c9d7c441e64967ec54a57ab57e3e92268bc99915a2342fe0c4ab8c5721645e2031e9e3e1874aaf6ea0b3ccb156e77b8f3f243e1e

  • SSDEEP

    1536:2RhGQX6wjyVACLz/gq/2zJZmBKblDrnvZV67UZ+lOEvlEeIV:2jXy+CLzIu2z3FbRrvR+lOEvgV

Score
10/10

Malware Config

Extracted

Family

xworm

C2

2.tcp.ngrok.io:18238:18238

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stand.Launchpad.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections