General

  • Target

    bloodmV2.exe

  • Size

    68KB

  • MD5

    cd01457edbec46c7209ae4152b0beeb0

  • SHA1

    e42dcd91b90da19a67375fffa37594ce3667a8c3

  • SHA256

    ddde19bfdab257243371129707864723a8996a5ef901a3a8eb6d38f9a27da9b9

  • SHA512

    b1163f2db0590c9906c3a05ba464918efcfe07b01b8367e415fa9dee2a5d9745f715be341f8ee11e6093e0a4997671c1b8534abbffe9186a4b92d1ee2a57bdad

  • SSDEEP

    1536:hVEUJ7xHfh0SkNCXb3Vwwi8lFajxIbLfsWjx6nOtmOQ5z5OkS8:hxx/0CXblwQlFRbLkWjyOQHOkp

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/zs3YKzJ3

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bloodmV2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections