Resubmissions

23/07/2024, 18:07

240723-wqkxlsvdla 10

23/07/2024, 18:04

240723-wnvn2avcrh 10

23/07/2024, 18:01

240723-wl2dssvcnf 10

General

  • Target

    dllhosting.exe

  • Size

    66KB

  • MD5

    57faa6b84fd1d328eeff3198a41dac84

  • SHA1

    9714815a289f2b30c26d489aa11f980392616be5

  • SHA256

    c5aaded89d2cfe3abdbd8956dc2ca8dcee427b5d7c9c89690921e43a85e55192

  • SHA512

    82492fb3fd25f6a1f74c7fa20cef535997101c53ef6933fffbcc126c8ac220db15bbc8520adb041d3aa634044d5af8c64411114addf21658eb1d5ea08d1e8dec

  • SSDEEP

    1536:c8K/Rzqn50Q7gmVikpizn4bctWypSPD6POQ7rDb:c8K/RzK0Q7gGisbctcaOQ73b

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/YFCVB1E9

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dllhosting.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections