General

  • Target

    argon.exe

  • Size

    57KB

  • MD5

    73b7830213631d75cfc7810836e21643

  • SHA1

    41c49c505fb30d41eb3edac56fc8b023d1f3993b

  • SHA256

    5ac8621d5853e61fa0d107930efe661cf852517e038c103050e024fdf2c68c11

  • SHA512

    a286bc2b0a373f2ef42422dc03b8c6741dfbe00a79759c6741a2be41b94b1f8ca2c898ffc311107c6d0105aaa5a5a8f37148d842f00c53d2cd35651b531f7b2f

  • SSDEEP

    1536:xPZlo1ztoTNefaYwkbfaXs66tsdrk08OY3LHxG:xh6eIckbfa36urt8OYzc

Score
10/10

Malware Config

Extracted

Family

xworm

C2

exchange-extends.gl.at.ply.gg:31120

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • argon.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections