General

  • Target

    Aimware.exe

  • Size

    78KB

  • MD5

    377d54d068dd4f1f763ac31ab2acbcbc

  • SHA1

    4813b47569c6dca859f508bdbb4863c7fe63e19c

  • SHA256

    030861ca5f6120de923ee5206c8f0f6f8db53333bc826ac4c291625800c81632

  • SHA512

    dd5557f1c390e37ade4b0fdef3a3c1e48024fe5139f85531c8f80346c5a8e537b7032c807245a465753cbab2ea4c20b460797a15c986fc5c4d79b6f42b05fca2

  • SSDEEP

    1536:lo/bM2r2gqKfuBbmYKTaVc3MjCFH1+kbgBMlNZUKbBwOBUJdxGvDmZIXs:W5f4ShTaVcMM8kbgCzZ1wOBU8Dz8

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:4308

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Aimware.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections