General

  • Target

    2360-53-0x0000000000400000-0x000000000040E000-memory.dmp

  • Size

    56KB

  • MD5

    f7c77bb93b988667642199fb5bf5689c

  • SHA1

    8c039cb19b8e5d67611aa72f89d08468b46d352e

  • SHA256

    9bdc3f29bfd40d66da208eafb17bfb1189b447804db47363f1a2e8f681483e08

  • SHA512

    e6283d23c8ca0da41aa8452c980dc24920e8ffdcebf9d95fbec39b5c0b18b496496054dc24c7f6dec68ca29da67a0f9f9b0b76843705a5c322555164f6a48a13

  • SSDEEP

    1536:8DGkptwyZScCkU4rAUsZcB5xCuF59CpO9Jo:GkUs6VF59CpO9e

Score
10/10

Malware Config

Extracted

Family

xworm

C2

brasil.ddns.com.br:7000

Mutex

qQwviEtWYn4ErXAa

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2360-53-0x0000000000400000-0x000000000040E000-memory.dmp
    .exe windows x86


    Headers

    Sections