General

  • Target

    dwdadwdwdwd.exe

  • Size

    44KB

  • MD5

    4f62cc442abeafa28e7c3f739c57af96

  • SHA1

    65241b97f9a3b4611029c96988e984db150a0736

  • SHA256

    2df6920ecb9cc4ed33fcb4ed91e6feb75b2697f4036feea862e461612a3fe642

  • SHA512

    864d643935a31aca70f59d51ecb21ed7bb314bc6e48840aa45ff1ac5a630b288313288614f8c552e5a60f04f71a6d9808383e216bfcf476ac45929c9a8bf161c

  • SSDEEP

    768:xtAbfFuROha3LPKe98D+07eEsRgkbfVFNh4BZOhhHap8pI:ncuoUSes8+kbfVZ4rOhFQ8I

Score
10/10

Malware Config

Extracted

Family

xworm

C2

192.168.0.7:5004:5004

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dwdadwdwdwd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections