General

  • Target

    4b538e507d4f5f290f780f5f8eda218af0f6e92cce3c943ce8616c3111282fa1

  • Size

    32KB

  • MD5

    7a27f7fddf35bd7e1bf7d25f1e8287b3

  • SHA1

    8c9e34e9f631d2ae790cf17a379b463ed709aaf2

  • SHA256

    4b538e507d4f5f290f780f5f8eda218af0f6e92cce3c943ce8616c3111282fa1

  • SHA512

    e9506c87d92b1bce2a70c23c9616146a21087d88f070b912f80029f6323165926b730e698e9f98b4711cfab5e6e55fd19265b678c009da4d01a8c36411214a59

  • SSDEEP

    384:4EbmX5Qa+vN1h1+X3v6JFjL+g93Tm2eaFOL1dRApkFTBLTsOZwpGd2v99IkuistY:9Va+vNtg+PB93Tw4e1dVFE9jNOjhFbS

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

147.185.221.19:2137

Mutex

9CcTGIO3qXvHp4FO

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b538e507d4f5f290f780f5f8eda218af0f6e92cce3c943ce8616c3111282fa1
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections