General

  • Target

    XWorm.exe

  • Size

    108KB

  • MD5

    4e771d8ab93962867d6ff4bf1683eefa

  • SHA1

    6703a4d4fc7abc5f00b5769740822c0bb70c2a8d

  • SHA256

    aac41ab4f44400f9be9d38bea40f5ecc6dffe9b2a0ff77be9017cb0cac956c8f

  • SHA512

    1f33354dd99d0faa2828b88c3128fc6f9953e2194e22e46f4c0732b7736ad85d1cb0df0cc2fb0867dd734120b3e59204ea9aa231ceb1d839e12902b4d39f49d9

  • SSDEEP

    1536:ti9e1ny4P32ph+HVc6t+UQvHDG0jg0w3Uf3LLpIVPjfqdeXrI:s9e1nyhh+1c6ED/jg6f3LLpIVLEZ

Score
10/10

Malware Config

Extracted

Family

xworm

C2

meet-showtimes.gl.at.ply.gg:33561:33561

Mutex

ccxFAV0dZFOG0nh1

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XWorm.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections