General

  • Target

    BetaExternalV1.exe

  • Size

    62KB

  • MD5

    365e04c2d7431f7808d28ef737db83d7

  • SHA1

    35a635818ad6efa66c419e527840a74886f8f9dc

  • SHA256

    6dbbd90e667ee970f937bfa787ed49a6e85f4d5f3b9e49d7155e1e27e3942ed2

  • SHA512

    6b19e9c597bb859a3bef46fef7d5715eb2324d22a77cf83083c6d9ea27d9640d528b6260cb9ac476a7c560eb4635bb90966f2db1f960c620009a158a674e2c84

  • SSDEEP

    1536:7qiiw8hHzTIUt67s5ob+3RfmaMNF9l+7YOe2Toze:2G8hH4Z7lb+3RYfakOek

Score
10/10

Malware Config

Extracted

Family

xworm

C2

0.tcp.ngrok.io:12311

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BetaExternalV1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections