General

  • Target

    test.exe

  • Size

    74KB

  • MD5

    2a30855f5ffc49691ff6045485d3bd3f

  • SHA1

    b1d5b51c46987f9fb10b32639ced2bf0c5a107af

  • SHA256

    4658f7c74beaf35cda2ecf15e8832954e8d028ad707372bced2c1cf535183887

  • SHA512

    fcbb82b6005ae58966d9e3233fe77e613a24fbeeb1ec4e354edf8a7f7e10eac62fa1c157cbd407305ec7055ec0d641f56b6d8efda1c1e44604801d4bd4c83e46

  • SSDEEP

    1536:vPgDRKpEl0YPVQh09EHXPBkb4FCim0bTC6kQvObYYOXVg6eQb:vPYRKO1Mv/Wb4FCSo9cYOX+6Tb

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/sGaZ7csB

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections