General

  • Target

    3bf7ea024dfe103f86bf80700b7d85e0N.exe

  • Size

    31KB

  • MD5

    3bf7ea024dfe103f86bf80700b7d85e0

  • SHA1

    cca91d2a166d0e9b239d0c5a295c4fcc16b9478a

  • SHA256

    a5f5a6296107a8f82fe797aec8c95f3f301d906e924bdfc0cbfd3ff1c4aad697

  • SHA512

    50d614093f0497f6463a550908a131e0c6ac01d7d20a7ae781f0d8392b6d5766cbd4ac8800e997a220f6b665e9160fe7d460dcf3a6e9abad3ea29b7aee75685f

  • SSDEEP

    384:EqbpSb7bZOdeHHAhxufHOLZfwIuqTE6QmRuptFlBLTIOZw/W2Zvn9Ikn19VxOqhE:EvOdeHg/CKjuOCm0FG9LbzOqhwb0O

Score
10/10

Malware Config

Extracted

Family

xworm

C2

redslide13395-41405.portmap.host:41405

Mutex

C5b4vyNszLHPF6NI

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bf7ea024dfe103f86bf80700b7d85e0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections