General

  • Target

    Loader.bat

  • Size

    83KB

  • MD5

    1c0914cfd5ec348c3c62872fed2a62fe

  • SHA1

    feba15d8061df0a050f270d89433debf3cad9ada

  • SHA256

    b3088aed0b0a78258d891a928c263adedc0c9882cb09bc2d0e1a5870c049e6ea

  • SHA512

    11d8fd0c31076d2fdb46614012e75e7dc11cbc5036233de3194305d7ad6c4bb44a1c41930aef5c809579d70fef59b0aa3e8d1ee1ef4c7463ad62d8122ed4d62e

  • SSDEEP

    1536:viXdImWbaY9iLm9B3oumB+IDuZbK0rFJv6Pdy9SU6Af1EjAOYA4rmWh8:viamqAm9q+IyZbK0hJCPs9S6fmjAOYA1

Score
10/10

Malware Config

Extracted

Family

xworm

C2

happy-wrist.gl.at.ply.gg:45652

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Loader.bat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections