General

  • Target

    BOTT.exe

  • Size

    73KB

  • MD5

    d7f349c0f7b92fc4a40e9f9bbb6a4b06

  • SHA1

    90802502242a5dcea27b9182022bc4b50b62c10f

  • SHA256

    7abe5b5518cd21fc435773da6a0060f5656e762ee148290450909c347cb78048

  • SHA512

    c58b20039a3e73258325397045da073a86e0c264abcb819117563409c29f35309a0d6e8b9d52684602a540169e52e9726a6f1e571aba377215f1a1eb7f8a8ebd

  • SSDEEP

    1536:oZfcp7Cnrayf/Jbf/CkGNVd8b6NsVOWbHFO3k:IG7Yraw/JbfMzd87VOWbHFO0

Score
10/10

Malware Config

Extracted

Family

xworm

C2

language-partnership.gl.at.ply.gg:19982

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BOTT.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections