General

  • Target

    53fb9e0303c4d185d12ae5177e01b9be1258a4a1593f024eaa77b9bba2d5987a

  • Size

    32KB

  • MD5

    39cbd9af10f5640d3f25723a26c7e636

  • SHA1

    ff391d628a954dcc87199135f49971bc19f7572e

  • SHA256

    53fb9e0303c4d185d12ae5177e01b9be1258a4a1593f024eaa77b9bba2d5987a

  • SHA512

    749a1d186a0de5076456fd8e1dc9108bbecbf8984e798dfe08f6f26202ed5e928a0985a523582ffb6b764d7f23896a91fe505fb84dbe6647abd97b3593a64da2

  • SSDEEP

    384:Z9qWrX290y4rWZ4RgkSXYLO5IG2dPbl0ADyND/u5+gtFyeBLTfZw/WNxvK9Ikbuk:9yLmicqIGMPbaKFhFy79/qsOjh5cq2d

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

case-defines.gl.at.ply.gg:12325

Mutex

hVKup5NZ1WIgByuk

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 53fb9e0303c4d185d12ae5177e01b9be1258a4a1593f024eaa77b9bba2d5987a
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections