General

  • Target

    SearchBarApp.exe

  • Size

    67KB

  • MD5

    baea31a781740f356f6cbbda31877c5a

  • SHA1

    f50f42b1304a7a0577af62b44306167998f27b9c

  • SHA256

    88599db764aee11e5b37bb3c40cdae1b372f3275f9db8a0ac4c63a2352acf18e

  • SHA512

    0428f40d939eb025048ae1716c137ce0695552e6435b9b42c15a8af6cb3016175df6af31e72a1d9bb2c61ffcd07786cf893474de2c3c690a95c69bd39fff1c0f

  • SSDEEP

    1536:TvRgoyozwnhe/1pe7OP/MXnejPl60YuTbPp2RIlueOrkCnDqt0:VgxxhgWO8OjJVbP0IJOrm0

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

shown-preparing.gl.at.ply.gg :47976

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SearchBarApp.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections