General

  • Target

    zamn.jpg.exe

  • Size

    40KB

  • MD5

    f4b52df84d52d10e3f14359a6e7203f2

  • SHA1

    702e21a0b71ff7f31198ffedcd1eb155cfaa04bc

  • SHA256

    029d691236ab6acebe336ec3df1bf395455213d96456d7a5e38cefed534b494f

  • SHA512

    8947eb9352455720d85d262d31facffede47e221e438b0a8ad52eeb78265385df9df84d820d98288fe3c7e352af5fdff26e7beb4dc2c96c5de2d146a62851e06

  • SSDEEP

    384:m7HjdJMD8Bv7sNfyvvmnmnuFvQmlazuPg4/Kx493yBtrLaWaPjxLCwTsSZwHNWRB:GdJMD0vQgXOPazgdKd3iS4Rlx

Score
10/10

Malware Config

Extracted

Family

xworm

C2

meet-showtimes.gl.at.ply.gg:33561

Mutex

vHycTFyoj2BjsE56

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • zamn.jpg.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections