General
-
Target
6a9af889c1cec1c54396e6d8165cc71d4164db4e06705f644fbaa715b4483599
-
Size
69KB
-
MD5
95f6236056d703c8ecb16447e596ed20
-
SHA1
f31d27aae8c87b2dcfca1d0cea1f346178f72e89
-
SHA256
6a9af889c1cec1c54396e6d8165cc71d4164db4e06705f644fbaa715b4483599
-
SHA512
aeda10ece3890e3fac57769752381462903a38291b48855151f191c96914aabcd746d9b890e0cb61f9c377086e1c0eef64ace89989fa294d725508fb3cffde06
-
SSDEEP
1536:av9qY7Zae4PTzENbwW48ge2rEr6AgB7OCK8oJwaZm:gTYtfENbc8AROCoJrm
Score
10/10
Malware Config
Extracted
Family
xworm
C2
provide-federation.gl.at.ply.gg:54365
Attributes
-
Install_directory
%AppData%
-
install_file
USB.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6a9af889c1cec1c54396e6d8165cc71d4164db4e06705f644fbaa715b4483599
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections