General

  • Target

    NET.x64.SDK.exe

  • Size

    248KB

  • MD5

    7094700241a47ee2106a3f6fb0d60a8f

  • SHA1

    b9293a32b0bbe586ba7f3a93f91a58ba802329d3

  • SHA256

    f2ce58fe4be0d5fb454947c330c26a9fb28f092e35f31711d07f1b6fde230654

  • SHA512

    9ef782c272c40cd83aec6fee16821cdb3682b6c8d600c4c50b0ef8865205d4cf6c13ed7eb2e6395227ac75d3855845e4efd5936e4eddf746bebc08010b5f2dae

  • SSDEEP

    1536:suPy7kflzdNw+q+lN6VdQP4x0bHP/LhIjtTmiO406XxLaQOj+X3OXGbcG25TRTJ:Hy7YNLq+rqyAubHb4nLaQOj+HDcdTv

Score
10/10

Malware Config

Extracted

Family

xworm

C2

86.160.77.154:7000

0x20Be82eDe1D3001d450d10ef6944eC28a0682F4f:1

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NET.x64.SDK.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections