General

  • Target

    setup.exe

  • Size

    82KB

  • MD5

    2c73d758147358c4c8260a8ba7064926

  • SHA1

    6377735ed446fa00ceece4f49d1ebfaa76225c2e

  • SHA256

    609b763d7668ee35354db77d9d372c79e3bf2913fb0b3c24f17ca99ffec6a15d

  • SHA512

    00fc1b5eab6c622581732940d9796bfcd7934aeecbd9232f2ff2b6247827ba828c23aa58da9fa32d6712778ed89d01e06700b570a297842a0213848f0c86b5ab

  • SSDEEP

    1536:juEgeTzQU5HfqL6MSfbIprHxsvy1bbKf0ShKOjnkOzrv3brqi/:6ZeTzQU5HfbJjIH1bbKfHDkOXbD/

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

girl-tries.gl.at.ply.gg:7131

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • setup.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections