General

  • Target

    system.exe

  • Size

    36KB

  • MD5

    91a717fbe27a99fdbecfd9e5caa1d43c

  • SHA1

    451a491dcd1783a50f1012da57df210943e62ee1

  • SHA256

    77654ce1dba85e53307d031741e3dbc7a0e4aca4d299909b872da04c7c1606a2

  • SHA512

    a35558114a7413dc57702c67d5caff5c19247cefcbab3faf1784f2354a8077793ed1c6aa55cb44ff01197513867631d39fdb319e8c4e6115b9bd971400e63fd9

  • SSDEEP

    768:YTAJM/jPWzJzCwFFALFyn9CasOjhwD2Y:YEsjOlyFU9CasOjk

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

components-resort.gl.at.ply.gg:9316

Mutex

DpTatUDA1wVuAHNo

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • system.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections