General

  • Target

    test.exe

  • Size

    39KB

  • MD5

    7a692a45fa84d72f714d3943584d523b

  • SHA1

    7734996c1cf1dfb336976d8a7d8374af0eae340f

  • SHA256

    777e64079a1327220ff8d47f4f51352329171494a3c687a569a124e4c5b786f2

  • SHA512

    ba343a4f904212c2217b42337d1dc057bfc1a76f979a4a6c6a07f6e0c8115b3edb32ca0b26a5efa3a8c9ddd1a83fe3e0e7b0a44476e057c9dd9102f9aedb4be2

  • SSDEEP

    768:S9J6Zgrjn8bqrm0hs0LuTU35uXuyjWxF5Pm9j/O67OMhZ3IB:S8grj8eemP8u8aFM9zO67OML+

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:17341

press-higher.gl.at.ply.gg:17341

Mutex

QQczO9E6W6ls3VOv

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections