General

  • Target

    VOID.exe

  • Size

    133KB

  • MD5

    60a8999608ad4b1a80083eff222e755f

  • SHA1

    5df27c9660ee0e5ae6ad031dc9e16b2ea69d6782

  • SHA256

    baca7710ced3fdc26d2f0d33c4316dfda772fadb55c3f66ca738014f69e40922

  • SHA512

    65bd2cab38c57d94988345f1aaa71be7abbb8a99aaddb8b64e0dc847871ac1ed3fb7520ed3f2a790b494fb66f52d774f15e03a5bcb9131f4840cbec685af8814

  • SSDEEP

    768:l+CD93W03I42JiB70iVF49jNOjhLbH621sIwEk4w00wE:lh93WEI4WiR04F49jNOjpuE4

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

while-interfaces.gl.at.ply.gg:51728

Mutex

K4svUfPf5qgPdS8d

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • VOID.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections