General

  • Target

    batch.exe

  • Size

    67KB

  • MD5

    a610358cd5e8d47862f3e2559803c970

  • SHA1

    cc6aaca3064b719da8058bcc3934c05c58dfcf26

  • SHA256

    2c53f7e04e12ab519113c831569270b51bed10cd0e5f70c04c3005e4e8758d60

  • SHA512

    10d188944623d9c3f18395b31f9504aa6f1dd3bc6db2681cfdf6b014992110f7132c197d0ea7255d27311785844d342c0e9e320bace74ac32a242cad77acb5e2

  • SSDEEP

    1536:WxyR3EixPcOhmXv7tEebuc9Z9w96UXlQNOM0grIm7tG:WxyNgWmf7tVbuiZ+XeNOvgcatG

Score
10/10

Malware Config

Extracted

Family

xworm

C2

quotes-suites.gl.at.ply.gg:49403

Attributes
  • Install_directory

    %Temp%

  • install_file

    System.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • batch.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections