General

  • Target

    WAVEgg.exe

  • Size

    73KB

  • MD5

    09a29f4cee4001dc8c73cd6f6dc248a0

  • SHA1

    367de3a5467d19f046047468927654483ca84493

  • SHA256

    3cd97fa3ed9b3334361d5a1c55519b75a5767dff82fa0a3be993a0b295b32e2e

  • SHA512

    9379c581e0974752ffaa81e7f055f9d74c00747fb368596347a9d4e4771e35cde8acec39ff21d95545f6b6a91f1b2412177d914e178d9de744fa39766001178d

  • SSDEEP

    1536:eC94uQn5bdGp8psrktTjbJUWdH89ZiOTstSCOup:dnQ5TxfbJxwiOxCJp

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/cVQrB6DR

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WAVEgg.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections