General

  • Target

    бабах.exe

  • Size

    65KB

  • MD5

    146cb0406463303609eb5b57f139d633

  • SHA1

    efbda171a78a589f35796653fad914ded6c5b2e2

  • SHA256

    ebee82362c62be07a09c36401f3e573b6dcec199a3e65721a9402dc1deb91ab9

  • SHA512

    215e63418981435ede7f88e6cc968a74fb7bae2fb92798775fcc7a46e6f59c3f9321c563e4d4aa55466301098b410e346aa79ff63c3baf1ecf352526f8a922ac

  • SSDEEP

    1536:JFhZSanl3TICHuYSZQqavcF+bxYSohdb6+dOuSHc:9tBrqaEF+bxYFzOuCc

Score
10/10

Malware Config

Extracted

Family

xworm

C2

bar-analyzed.gl.at.ply.gg:64933

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • бабах.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections