General

  • Target

    Loader.exe

  • Size

    59KB

  • MD5

    07ac8571846ca0cc9f6fcdbe1d000be2

  • SHA1

    3cbe16f7d24d40b590f97b1999c64c5bb889e8c6

  • SHA256

    2a3bcea7cadf94c65d4462b2297285078f5232e84267dfa641cb23475ffdb1b5

  • SHA512

    56413d14e5ee2e615c19232d93047c9d2cc422e083eda0f9f5ae1dc04798989e73d5ad80e06a7dda166deb0177206fb1ed045773bba3975667c12409d67d1e7e

  • SSDEEP

    1536:oG5dn7tpWah7AuW7ttyCoTf1AZbr4w0eb6giOJ5LX:lD5pHJdOttyxuZbrp2OJ9X

Score
10/10

Malware Config

Extracted

Family

xworm

C2

unique-emotions.gl.at.ply.gg:54742

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections