General

  • Target

    260e5d45c87a65a323a83299f4e506c1.bin

  • Size

    86KB

  • MD5

    260e5d45c87a65a323a83299f4e506c1

  • SHA1

    1e097fababd5f0b148063c0f782ed24fb9ce2eab

  • SHA256

    8f94583eec5aca659887cce2919cb9df83d30902b7dfd0739652b5b34a9a9834

  • SHA512

    b2c47682b9c226b156a25be0682be0bdd6fbe300f7551886e5eb4b250534fb7635f6b6255174305ba3e74be502c1a6a867c0b4d8597ad648fab2d42536795dba

  • SSDEEP

    1536:XMu6hjMcUsFZ59lJbtEq0d+bKR3F1rhCG60TPDhqNZyMOJKTfdV2jPbf:XMTN9ZB5E+by1rqNYMOJKRV+f

Score
10/10

Malware Config

Extracted

Family

xworm

C2

134.255.254.225:5058

Attributes
  • Install_directory

    %AppData%

  • install_file

    Windows.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 260e5d45c87a65a323a83299f4e506c1.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections