Resubmissions

13/02/2024, 13:02

240213-p9yt9aae2t 10

10/02/2024, 17:38

240210-v7p28agf59 10

10/02/2024, 17:36

240210-v6j5ksgf55 10

10/02/2024, 17:32

240210-v4ahcsgf37 10

10/02/2024, 17:24

240210-vyw46see3s 10

10/02/2024, 15:58

240210-texe6afh58 10

General

  • Target

    installer.exe

  • Size

    49KB

  • MD5

    302f116f77a1da406376d6d72543e00b

  • SHA1

    b0566fc0b12908ccced8ac8f0ad57cda42060a06

  • SHA256

    4961cfa023831ff4177eab676fe92f421f991e05c1a70158db04acd397b9ca5d

  • SHA512

    c3146473177a711b436410cf0c7bc80cbed279cad5d99ae20878017ccbb0828d6a667ed55b2d31ada8ea5862eaead4fe63430b96b58c4ad133696390aa0517a8

  • SSDEEP

    1536:p2g8/cU6qUbbyk5ckbgbfsm6KOY8L4FzS:p2g8I/CkbgAyOY88FzS

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %Temp%

  • install_file

    microsoftsoftware_sv.exe

  • pastebin_url

    https://pastebin.com/raw/K9HnkriZ

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • installer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections