General

  • Target

    awdawwadient.exe

  • Size

    63KB

  • MD5

    dfba7bc7b3ca3fde12cb85be938d8879

  • SHA1

    4244d7943ff69e4be30807dabf825689aa09723b

  • SHA256

    f673ca8fe66349501805ff6a34190bf8f1bcbbf4334b9e7274446df883bd4148

  • SHA512

    b5e6b0878652904011c82f07a96d867a835558a92266545e298bf84075c4c0b2a666bd019c2e491c38b4a1ed4919b8af8bd3dad0f7eaa92cc7c4d647bc97cd11

  • SSDEEP

    1536:1JWTjPfI9X4Eep8phhYaN2msZbsUN+1O5Oz4zfzRxt:1YTjPi438phqM2nZbsnO5Oz4zL/t

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

172.200.210.28:80

Attributes
  • Install_directory

    %Public%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • awdawwadient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections