General

  • Target

    B1OdUv8CBH.exe

  • Size

    1.4MB

  • MD5

    c85811f36d6c99795002b92522704d59

  • SHA1

    ee46a4ad80215beb9264b7a08f127de3ebb32c2c

  • SHA256

    2275e3826fe1dbeaec959dfc37c26262a64ff5379f3b25e74d0121d4723a9b20

  • SHA512

    c4bf6c0321e5c49a63a10d6e609f3f958c83486e315d4f0d71ca6438f80f3f660740b5fd6b333285f7587dffb7d53ec4be7716d54abbe718c540c04824410d5e

  • SSDEEP

    768:7lbOc7iszHQMNx8STnbhb8v2OIdLEncvCIVZubldo5QgHOqGbotiQaqq6yL69Flr:Ec7sS3v6IDuaOnboF069FlOLUAa

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/a1kmrNub

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • B1OdUv8CBH.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections