General

  • Target

    вирус123.exe

  • Size

    69KB

  • MD5

    92ee9e69c5de895d8f7b871305051dfb

  • SHA1

    9cd653476d54f55268fa566ba129486c204ca410

  • SHA256

    faf5ef8852021c4f2ecd2202c95087f017b6dfcebe0688bac836be03378ab8da

  • SHA512

    977c5c0f8f4137bf64714afad3c59b4191d6062bb7f93f354a6caf53e74772c2c59be2aa8e9046a5a32a821c1354842616b87d5ee0ab677ee1d195890401895f

  • SSDEEP

    1536:rezhLk50cGcLxgh1ALLN+b3C0pPa6U8ODXpwCjTR:deUx5+b3CN8ODXpwC3R

Score
10/10

Malware Config

Extracted

Family

xworm

C2

success-emails.gl.at.ply.gg:12390:12390

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • вирус123.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections