General

  • Target

    12aa47db9b5a1c6fddc382e09046d0f48fbdce4b0736b1d5cfcf6f1018fdd621

  • Size

    66KB

  • MD5

    8063f5bf899b386530ad3399f0c5f2a1

  • SHA1

    901454bb522a8076399eac5ea8c0573ff25dd8b8

  • SHA256

    12aa47db9b5a1c6fddc382e09046d0f48fbdce4b0736b1d5cfcf6f1018fdd621

  • SHA512

    c9e4e9e5efb7e5def5ae35047e4a6b6a80174eade2a2d64137f00e20d14e348c5852f9c1bac24d5dee4a6d43049b51517f677d504fbb9a413704eb9985f44f9f

  • SSDEEP

    1536:1FLm450oGcfjovZbXsCZWMFarb9iOK2IPsmNOGYt6X:1FS450oGcmZbXDZTaf9iHPsmNOGtX

Score
10/10

Malware Config

Extracted

Family

xworm

C2

91.92.249.37:9049

Mutex

aMtkXNimPlkESDx9

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 12aa47db9b5a1c6fddc382e09046d0f48fbdce4b0736b1d5cfcf6f1018fdd621
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections