General

  • Target

    Stand.Launchpad.exe

  • Size

    88KB

  • MD5

    27c3cf6a0ff4800f931e976a30c6735f

  • SHA1

    2dc2a1b7cf6eb7ea16932929a47876e884726786

  • SHA256

    19f6accf369cbb6bdc7dc62bd9c31572ddd17579de749bee4274d9060264b6a4

  • SHA512

    1bb161df47df40a8ec56dd7aa86b5ae04f957bd424d6dc6e7b83068e30d02705250f4077d5eb23651734c85ed91e3cac01b7e663eb3e84f7eff7e1a173b10282

  • SSDEEP

    768:c9+LYdoxpfaQRNBQid927XElgwNK+sCGREsB4IoOOlbL7TL9OsqQv6jEOxuAh5GH:aCwMaPuNK9f5yDbnTpOjC6oOzyjV

Score
10/10

Malware Config

Extracted

Family

xworm

C2

2.tcp.ngrok.io:18238

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stand.Launchpad.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections