General

  • Target

    wdwdw.exe

  • Size

    52KB

  • MD5

    d7776decaf3b70e118d63ac2796db1bd

  • SHA1

    aaa923b53913ba05474bd3d5183b1abc53965282

  • SHA256

    e361493f37544243cf88c21519a1a0caafcd9bd8e329bfed1edf5bdb5ae8b8ef

  • SHA512

    1be21712ccb6455523b0ffd373786e88a60935d66bbfc27d935eb12cae17915cef1518aff0fb8c65749c9efe5ff0b43eb952f0a9f7a9bd4f7ec2989e6491db7b

  • SSDEEP

    768:A3vtMC4vIdB+ryQuOFip+AbWzqwZq9d+bsuaAkITd9MIzq/OYThdDpi:A3l6Y+rCsshCqw49YbVajCMf/OYTL1i

Score
10/10

Malware Config

Extracted

Family

xworm

C2

94.6.233.124:5004

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • wdwdw.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections