General
-
Target
56ebf5fffe877e059469987b09356d5fc368ca9fb69091cdc6004daf3511a082
-
Size
36KB
-
Sample
240419-vpczyaab72
-
MD5
1af4c6c1acc08b31b2f68561cb4131c1
-
SHA1
4f9d8e72b31f3937b1c225dcb78ed50adf6913ee
-
SHA256
56ebf5fffe877e059469987b09356d5fc368ca9fb69091cdc6004daf3511a082
-
SHA512
084d111b01523061339d4837d419a2de737f22f86a8fd979e91f1986911525d5f4b032e5c8e1cf98de74de5417df621c20f500f364481f2af30c1331e784f4cd
-
SSDEEP
768:4isiM4p82yPOCk1jzaCCC8DGRfs0LN80Y6KatJhZfHui4LzFGfpp80l:4AM4p87it9JRfjfYCHkHFG/80l
Behavioral task
behavioral1
Sample
60bb0aae72a9ba2fdb141b497da0e4671c92a6a1bd825c72a8a8c2df4de08fbb.exe
Resource
win7-20240215-en
Malware Config
Extracted
xworm
146.190.57.132:7000
-
install_file
USB.exe
-
telegram
https://api.telegram.org/bot6491699241:AAEzWMqxLHLa_DADVhFrtpk__NqYBpyS7tI
Targets
-
-
Target
60bb0aae72a9ba2fdb141b497da0e4671c92a6a1bd825c72a8a8c2df4de08fbb.exe
-
Size
61KB
-
MD5
66e85d3f13035d6eb90c74dcc5705342
-
SHA1
2c61b7329d273d7269079ca87513dad0cd347db9
-
SHA256
60bb0aae72a9ba2fdb141b497da0e4671c92a6a1bd825c72a8a8c2df4de08fbb
-
SHA512
1b27571192a60ef1eb57bb04593aa51e282aec63f557cdb93d8d401aa03da1abc533ea73b5a6e50d672010fe5fe31b5cf9b38d9edd1f7eb1cd7740736ac54cb7
-
SSDEEP
768:w1wjBc93YZiFAHNquxNPLMTPM8v7P3g/bbirPrtA1Nu213OGhplHVeDO:mwtUYYF+qu208LQ/bbirkk21OGvlHE6
-
Detect Xworm Payload
-