General

  • Target

    HorrorField.exe

  • Size

    82KB

  • MD5

    633268205b44383cb9ce111b02712911

  • SHA1

    2f038d3aecda6401cd17c71b6256310c78801567

  • SHA256

    6e5d28963d87a9722c7f67b5ec9938bf9da45c045fceeac7a66c19189d897669

  • SHA512

    8a5abe02904b9a8770303af7fdb9ac6b7b371b48259087ad0ce35ebfdcba68da3683442165106b93a3363b99b2d2af45532989e3f79f76c7e40cfee9011b3bb7

  • SSDEEP

    1536:8o526dv8MrVxbQ/HNpXpbyers97TzLnNO5yhEQyQpYc+vU0EEo3:8o4+rVxYHNfb9rmTNO5yK3c+VEb

Score
10/10

Malware Config

Extracted

Family

xworm

C2

audio-conclude.gl.at.ply.gg:23572

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HorrorField.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections