General

  • Target

    Build!.exe

  • Size

    33KB

  • MD5

    699629522d431e79f279372e84230b82

  • SHA1

    8887252a7a7054f507a7465f9fa752e537dcd854

  • SHA256

    01fab63112b288ba42419acb436728dcfb466c5b0ce7cacbe01c2e281019c47e

  • SHA512

    bc2229ead9021e1fd6c08269c00bdbc2f3e42c5a1c7f2766ae28a5f6b6bf652cd8fc68de97a9ca6a612684086b3dd516f24ff147e07b7e991dd399e89eff2797

  • SSDEEP

    768:O/Ua+vNohsXm42JiB70FVF49jR7OjhBb1:lvNohsm4WiR0nF49jhOjDx

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

tr3.localto.net:44953

Mutex

Ci6RAvFLpTNkxDgK

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Build!.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections