General

  • Target

    Stub.exe

  • Size

    59KB

  • MD5

    5e898023998ac0c862eb3bd9694675d4

  • SHA1

    1723f8f80a10a486e4e6bb080dd202a54546b108

  • SHA256

    fb0d45b0e48b0cdda2dd8c5a152f3c7a375c18d63e588f6a217c9d47f7d5199d

  • SHA512

    13a325448f9333d9a00e5e6cc8d2404a8bcfb2092648811f2c652e20ec3dce0068c5945912fe846452d0cb1902792b21a020f86068d1bb11e22252348d13d64f

  • SSDEEP

    1536:NaagCTl3+ZVgvPgD79QZbIzaJh7PtzO022U:FgCF+ZKvPhZbICJ1zO07U

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

mo1010.duckdns.org:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stub.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections