General

  • Target

    яустал.exe

  • Size

    48KB

  • MD5

    16fe368751ad7e2e7f74ba17576cce91

  • SHA1

    a3cf1698fe673cbf9df7dc539b9af78e3fa99218

  • SHA256

    c9173a2ca8507f108284bf0d883dd5f4e00642f28779b33da865f9be0f3f1765

  • SHA512

    504b5aaff8217923313d0ea31e83424afd3b250e03624b67b783d23c46ce11e856932bde287bae4cf8d83d32e0bc1d6b705d6e656bbf44fc8363e92d599fa96f

  • SSDEEP

    768:ejnKV+3greh5nVK6wvAhOWfapF/9juj67OMhVLBcds4S1EAd8IIS:ej1greXFSAhLeF/96j67OM3KdS1EAd8S

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

court-floral.gl.at.ply.gg:37873

Mutex

iDpeCVi8LgKLrz4D

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • яустал.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections