General

  • Target

    aW4gYmFzZTY0.exe

  • Size

    79KB

  • MD5

    10877ec3912d6ea504445afae9f81774

  • SHA1

    2e33867a1e92173d44908f19476a906bd4f3c894

  • SHA256

    a2926efee48295c2660bb5b461da3b004a63dbf61eb7dec707a1550fb58c35be

  • SHA512

    afd3fcf65f051f4e0c05c92e2fb7cba781957e601565292de5c1b93910e9f73160e3dd0f12922708137c115181300df572d000584d06572771baff8095e979cf

  • SSDEEP

    1536:NXxJcCWxlmDiZohvPyiyHo3bc8lCG93s6kc6mgOMOz3tjq8q:FSPmGZ8pyHo3bTfnlgOMOz3t9q

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.0

C2

lunassworld-50930.portmap.host:50930

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aW4gYmFzZTY0.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.