General

  • Target

    ---.exe

  • Size

    65KB

  • MD5

    f6245dc4b99287b77839650384a3fb88

  • SHA1

    a3f0a8dd7abc27abfcf7f3435d2d9f154cd1a698

  • SHA256

    9da7a88b44357e6105c585feef826676661de0fea05b6e81f9776a8ae79e803d

  • SHA512

    4e26ba83bbaa25e6273f8f26d5eee1983ac997a7eff8950d2068c9f7c6d6384c8c5ea0ac2547875f700fa6ad7f452b7d593283be1c7c32a4d3294a0f56b97a4c

  • SSDEEP

    1536:w3br0QpFVCLKKscv2vP40eROKjb7rq/syr0O0zJT92:6rLgLKA+vHeskb72kygO0z6

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:5555

16.ip.gl.ply.gg:5555

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ---.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections