General
-
Target
USB_Driver.exe
-
Size
82KB
-
MD5
9bb5f4138b57c602464ca1ad0ab861a3
-
SHA1
31ebc11a8e14d0745a90c32da7823395169d50dd
-
SHA256
a62b5805ec35102fffce6c6f9c324e3817457c5e6bda4b28ef4207212e1d07ee
-
SHA512
3e27c2ca34e85fd707ea57c2f56542705c6363b715c977ad4b89550c01e29f8bab34031f4d6256b987ce3d8a996ee0ceea6261efad6054c95dd8a2ca31255935
-
SSDEEP
1536:QDy8f+7TZrhvZ/BpXHwbQZTlsb6V0VtYOYNhVLduj:QDyJB1jpXQbQIIQqOYzVEj
Score
10/10
Malware Config
Extracted
Family
xworm
C2
127.0.0.1:49923
flowers-blade.gl.at.ply.gg:49923
147.185.221.18:49923
speed-weekends.gl.at.ply.gg:49923
less-collectibles.gl.at.ply.gg:49923
Attributes
-
Install_directory
%AppData%
-
install_file
factorio.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
USB_Driver.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections