General
-
Target
24dc4abaef4e13ca2d72179751ac36431addc65df562988b00cfe01b10cd2874
-
Size
128KB
-
MD5
a508edabaa42e9ef40ab6b3273d72ad8
-
SHA1
40399fde4a39c10167b88b67ab48f74fe8a7da3f
-
SHA256
24dc4abaef4e13ca2d72179751ac36431addc65df562988b00cfe01b10cd2874
-
SHA512
c5e7f65903338b64805cf2a1308408d6dd7fcfda593f3190c4ab086da05e679062c1fb4efb60b3324ce1d6c64293f3120ef158a25f004ec76b2441bb31c7bb0a
-
SSDEEP
3072:Qhv7dFT9/ROqtfbBq81W1OOOO7OOOOO8:QVT9vFr
Score
10/10
Malware Config
Extracted
Family
xworm
Version
3.1
C2
86.97.160.59:9
Mutex
EPRGfxF0AV5eY2lx
Attributes
-
install_file
USB.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
24dc4abaef4e13ca2d72179751ac36431addc65df562988b00cfe01b10cd2874
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections