General

  • Target

    Swiftey343.exe

  • Size

    173KB

  • MD5

    b7f0275e2d1838540fb6d769f8fb0d07

  • SHA1

    b39e985e986bed5072fbcb6232a60f7b11050f78

  • SHA256

    e6ec8415977752ecbc7be9fb573d9afa72f4f65c200b93cc9fc21f2aa8657454

  • SHA512

    c117c324ac066a0e14770dc13ecac7f901ab1d8c5e5acfe14d11add22dd59a467abf2df0042d635f1fd79647f75a3979222f69f28d524a87afe13d97b66ee009

  • SSDEEP

    3072:VcnMBjUhJVuqF2b/zRfeOlfo4Mu9leRfqDZOypNlArw8wAldMIC:SnKY7Eb/9RohuGitx3cJNlm

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    swiftey343.exe

  • pastebin_url

    https://pastebin.com/raw/29pMCFbk

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Swiftey343.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections