General

  • Target

    UnbannerFIX.bat

  • Size

    70KB

  • MD5

    5549f34898a4c37681cfbd5ebbcb3216

  • SHA1

    e525a1772578cab062194d0321bcbb499f26d468

  • SHA256

    653c5e451e4670168cdb0ae1e3e9e8448a3a1da589e0721171a8f26203e014e1

  • SHA512

    ba4bbeaae93d39f3def7d5e781c724bb8e8d7b37b950f1dca141fc3c7e870dab265988dadcc0b2fbe6e1145118082ee131a12c31117fa699f2085484de22b070

  • SSDEEP

    1536:pZjehsOGtFtrJSYPAeSqRZ/M+ZbuNn+IxQy62fO+J5Avo:/AshtFVJrRRdZbuNn+l6fO+J5mo

Score
10/10

Malware Config

Extracted

Family

xworm

C2

potential-produce.gl.at.ply.gg:48023

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • UnbannerFIX.bat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections