Resubmissions

04/09/2023, 23:10

230904-253zmacd24 10

04/09/2023, 22:54

230904-2vlbtsbg31 10

30/08/2023, 22:57

230830-2xlqdabf53 10

General

  • Target

    x.7z

  • Size

    41KB

  • MD5

    39fe67cbe22def7afaf63d92980dc404

  • SHA1

    9f1fba5efbe614cab10db5b75c24083b4ae74369

  • SHA256

    9a74a2721b36f83a52380cd54307d6470adc88aba46e27d2757a808de07d7e18

  • SHA512

    3d03d03b3ac1ac0208dc415d9910e1b992634148dec1dfc301f3ad5b2ecdbec7fc5b98d6fdbf824cf298a9fc4c4a1778c0d92805dc698711039bcdfb69ab2629

  • SSDEEP

    768:bISn+7WDi06elkcmsfLVGuOhPiPI6+JopiAmYENOH2d0Xm/P7tfgA:bISnbDGelZmOVGuOhPTJoVKdt/Plf

Score
10/10

Malware Config

Extracted

Family

xworm

C2

crax31.ddns.net:8080

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • x.7z
    .7z

    Password: infected

  • 1.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 2.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections