General

  • Target

    0txtexe.exe

  • Size

    36KB

  • MD5

    0c27995b97a07b4f00640af0d1aa5e0b

  • SHA1

    f2c0bd34047422ad82d910867d05a28dc05897b1

  • SHA256

    ab5a62c5f4e883afff61be9b7020ba1aa9d52565dc310cee06488ad22ca8f68f

  • SHA512

    a52f035d899007d9989ed85f7c6808d4d34a6d8ff9f9d8262ba1d5728d873a99261c427f201ff90a90586c7121ff44a265b5ba10e94fa8e91af0bd79385c7751

  • SSDEEP

    768:jGLtt3QI2/yQJVZF2po8icHO9WbFb9krOMhVQXvT:jAb3QI2/yQB4pNicHiSFb9krOMD6T

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

xwv5group7001.duckdns.org:7001

Mutex

v8ErbRwm85mge9Zk

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0txtexe.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections