General

  • Target

    3d90aaded37f55ad3fdf422173469eb1d953b2697c125588efec8aed3150c0bc.exe

  • Size

    33KB

  • MD5

    3e57bce31b75cde10918b41219b2b229

  • SHA1

    7418e38d43815d871dcec73a824da23f9901a57e

  • SHA256

    3d90aaded37f55ad3fdf422173469eb1d953b2697c125588efec8aed3150c0bc

  • SHA512

    5fd3bbb6f75cc198c6c1cfd3c29ecfade2edf282592efc909b6c2c65c4de759791b4719ef825bc3bd5235c504a1a2e4fc646766a8e6e08b3cb06219ab36b02e3

  • SSDEEP

    384:Ll+PkjD9+E5MFs7iui8L7zKM42pfL3iB7OxVqW0RApkFXBLTsOZwpGN2v99Ikuix:B+CD93W03v42JiB70uVF49jZxOjhybp

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

nodetecton.duckdns.org:7000

Mutex

vNdCvtlIV5HF9ZNn

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d90aaded37f55ad3fdf422173469eb1d953b2697c125588efec8aed3150c0bc.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections