General

  • Target

    Image logger beta.exe

  • Size

    297KB

  • MD5

    f6bc727b25a9d6d15f62d459f2d875d0

  • SHA1

    a7502f6990fc98c4f634ec3e995cc7f443487b13

  • SHA256

    04f28f4975a7ff3cb3439b65b8d2fad8e99e3431b65be0e065c194908459790e

  • SHA512

    b0847c9b037ad9f2cffee62cd6f3193580e4e0950d0a3a1fbf6611df42474a511d30065f41cbdbaaf4360a6c61719b7d3f10692efac762d1a80f6311d42eb12a

  • SSDEEP

    1536:vB5uVw89wt2v7Fz9fyOjAEx93MDbT0f5aX2:v++tov7Fz9fyOjOQxK2

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

modern-educators.gl.at.ply.gg:23695

Mutex

lu0xD4CO1T8ycPIn

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Image logger beta.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections