General

  • Target

    XWorm_Installer_v5.6_CRACKED_WEB.exe

  • Size

    212KB

  • MD5

    1944352777346eb61474af431456f69d

  • SHA1

    c186adfb49fd75cafb2dcdc27335f3fabac98ba3

  • SHA256

    42bbd1111a65c99ddaf546defa047e8625e23e3585b6fc6fd620a3ea960fb0a7

  • SHA512

    af55e4a3e02c44b6eb705e356e0ac08a4d5d02733bad15b589d3e5710140d5953ab056ce152b9b0f9c422a688d3bb9520ddb6d82220f6b1e5b3eb33c3259d9a7

  • SSDEEP

    3072:oe4F71eEFiEcsCbjP37nPO3JomEM4A2ewhLapuvpAsZOyMqmyBeYVYe:oe9jEcsCbj3Iq/GWGwqqm1

Score
10/10

Malware Config

Extracted

Family

xworm

C2

continue-singing.gl.at.ply.gg:4436

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XWorm_Installer_v5.6_CRACKED_WEB.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections