General

  • Target

    who_said_that_skibidi_ohio_rizz_level_20_gyat_is_skidded.exe

  • Size

    64KB

  • MD5

    a13efa89a15a8d299a28b8270af7fa54

  • SHA1

    311faf4deabfd76440ebdb2427a4c753ffd69a9f

  • SHA256

    e3fce534dd32d546335fb07db03403f2032fb70092671da69e7af78095fdd540

  • SHA512

    fedbdc9f8d1508972b6667c85ee323a065e580062ffda14803484ad475819efab69fa5b97949abd4b39c3d35d9482d775f9216b63275625d5f4949749db4c7fa

  • SSDEEP

    1536:AW7vlkQY5DgkdPMT+HB1EOzbV9ir1ZP6/EOVQkFu:AW7M53sOzbVIZAEOVHFu

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:38533

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • who_said_that_skibidi_ohio_rizz_level_20_gyat_is_skidded.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections