General
-
Target
5d8f8150ec18b01bc925a4eb0d9299a0fbe789efc7eeb6ac4026d046ad47116a.exe
-
Size
33KB
-
MD5
a72670cc616ac85eb94bd63718099bdd
-
SHA1
de52ebc9dce719900c431594743bfa7e27f40d0e
-
SHA256
5d8f8150ec18b01bc925a4eb0d9299a0fbe789efc7eeb6ac4026d046ad47116a
-
SHA512
0c213913b5bf70e3d1d91da0fbd5fa6621537f7944dd7a27fa2953c807f3bb7996bc81105406eb95ffa1bde23843bca2011ea6831b59b001f13467f84978633a
-
SSDEEP
768:eUa+vNohsXn42JiB70qVF49jJ2Ojh5bu:NvNohsn4WiR0QF49jJ2OjjS
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
79.110.49.133:5700
Mutex
Bg9JRZDpyEfXxrAy
Attributes
-
install_file
USB.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5d8f8150ec18b01bc925a4eb0d9299a0fbe789efc7eeb6ac4026d046ad47116a.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections