General

  • Target

    FPS Tweaks (1).exe

  • Size

    59KB

  • MD5

    8d0e9038159524a7205918f068399285

  • SHA1

    e48ef83912837f757c2aab7487e5f122a6e02092

  • SHA256

    a9f8f9194a54daed2131e5cb9eb465822857067905c764c4c1b863ae18766feb

  • SHA512

    707d2cedd0c52e815e47b0059d3db61464eb66a666bc56a58982c2d597258e97c0a51b07f136c65f89139df17026183f7f7e9ff1686eb5fbe8eed43f63a866af

  • SSDEEP

    768:MuJrK/iGqvJCuxdPeSC5a3fKb5kbXSOoEYpc1QGFbYChTnG7pOxhlwAXzsYcw:TkfqbLeTaQkbCOvUzJcQOxtzsXw

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:1604

45.81.225.187:1604

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FPS Tweaks (1).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections