General

  • Target

    stub.exe

  • Size

    32KB

  • MD5

    6c03f7bb3415f27f2740c18c87c94cbf

  • SHA1

    62a32f84a51a09cea447c1b7e84506312690b96c

  • SHA256

    91ba771a0bf091a841cde0aa916edee0a9110428d01c1db27866bc8b96ceec9d

  • SHA512

    fd2cc3b31ed5496c02a4eec9394e0cc348f39eb3eb872fe04d0e5c453d849690688013e0c177d51c8fcfcd141bf1a418967f566074f57d001ebdeeb1e969ad8c

  • SSDEEP

    768:xVa+vNtg+PBo3Tw4hFzVFE9j4OjhrbqD:5vNtgwo3U4hHFE9j4OjJWD

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

193.124.205.5:9048

Mutex

8LrQcbRxK9fKNKPp

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • stub.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections