General
-
Target
6f5e4c2f1acbaa248f7501e931462d3da75e6deba050065538153bfe14a6bdb5.exe
-
Size
32KB
-
MD5
5703edb174766786773f4b565b3ccf85
-
SHA1
c4e1aa7bf7d5bd0f6c19e8c00d2b32cca143ac19
-
SHA256
6f5e4c2f1acbaa248f7501e931462d3da75e6deba050065538153bfe14a6bdb5
-
SHA512
d1c798c43abd58163fb059c56fc5084bc3826c842076bee7b432887b8aec421a685efe7b491c5afce7bc06765565eecc75c52b6901a34d4950c31d965874a2cd
-
SSDEEP
384:aEbmX5Qa+vN1h1+X3v6JFjL+g93Tm2eaFO3xdRApkFTBLTsOZwpGd2v99Ikuis/:TVa+vNtg+PB93Tw46xdVFE9jyOjhvb/
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
91.92.242.85:3344
Mutex
JxfYmBE6u9bELdp4
Attributes
-
install_file
USB.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6f5e4c2f1acbaa248f7501e931462d3da75e6deba050065538153bfe14a6bdb5.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections