General
-
Target
1672-37-0x00000000000C0000-0x00000000000CE000-memory.dmp
-
Size
56KB
-
MD5
45eddcbfb31479cd80b9cf79d38bc333
-
SHA1
7c181946ff7745e992bbec758af95efdbd286f2b
-
SHA256
20c1ab59d77b08f8c93793550a700196ac648ef7dc047dac7ec711b5a2ec460a
-
SHA512
1eb04252e20e7ec65644c5eefd0a5d5f91b28ac293d60c2c3380df954181aee637a4e75f39109e31bcfd6bd9d851e027f77ce1065d6b00c1678a840eaadb6bd2
-
SSDEEP
768:j11/wJ4aBcBoxVJt76RRVFr9jhOjhybe:51qCA97aDFr9jhOjoC
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
primary.fastly-dns.com:54984
kbk.con-ip.com:54984
Mutex
UvbWPurmSYHI9fDh
Attributes
-
install_file
USB.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1672-37-0x00000000000C0000-0x00000000000CE000-memory.dmp
Headers
Sections