General

  • Target

    3bac56daa03a796c66998a8555e762d7b4dfec7d5be60867b8e471e224eaa19c

  • Size

    55KB

  • MD5

    7d10d5baeb9167e419678d6c260b5411

  • SHA1

    3130ebf423682f09aae770047ca640cc7a8198b6

  • SHA256

    3bac56daa03a796c66998a8555e762d7b4dfec7d5be60867b8e471e224eaa19c

  • SHA512

    a0bff90b9711b9dcdde7cb57612811a68169009c4eb598706d855cd9f3f70b144546b2a804bfdb37eae10828feef0aa21b47cdeb97e604535cb082bf06ce23ef

  • SSDEEP

    1536:oj3ux+gPbdi8IUHrvZ8Bikn1yUnbV5z3/OpDOtz5kVyJ:v1df1eBikn1yybV5b/OhOtz5kQJ

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.0

C2

personal-singing.gl.at.ply.gg:32927

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bac56daa03a796c66998a8555e762d7b4dfec7d5be60867b8e471e224eaa19c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections