General

  • Target

    stub.exe

  • Size

    33KB

  • MD5

    a40e97c0eb53f82572065fb81ea6daa7

  • SHA1

    580f4eefc1b89eaeda09c792fe0317b7a4b35843

  • SHA256

    d01a5233ba29d8c904f92780e53bb4dc4961d77c398afbc5fd42dfb4c6b5f25d

  • SHA512

    938c9c5e2595c5901ad6d4e1e8037db17117c7295b0867468e0b29c3a03afc7604cddeba8ab8eef1c34b6543e349fd02160d2e6cd871a0b0d1cb8108d2c0c2ec

  • SSDEEP

    384:xKKRccqr/W5p9Lp29E4YBw6uMRJpkFXBLToOZwxJN2v99Ikuis+5iH6xOjhXbD22:VLhpgEZ9GF39jb5hOjhXb5

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

koklIvQYWQIiXRTr

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/Lv9Z3FeE

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • stub.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections