Overview

overview

10

Static

static

10

New folder...0).exe

windows7-x64

10

New folder...0).exe

windows10-2004-x64

10

New folder...1).exe

windows7-x64

10

New folder...1).exe

windows10-2004-x64

10

New folder...2).exe

windows7-x64

10

New folder...2).exe

windows10-2004-x64

10

New folder...3).exe

windows7-x64

10

New folder...3).exe

windows10-2004-x64

10

New folder...4).exe

windows7-x64

10

New folder...4).exe

windows10-2004-x64

10

New folder...5).exe

windows7-x64

10

New folder...5).exe

windows10-2004-x64

10

New folder...6).exe

windows7-x64

10

New folder...6).exe

windows10-2004-x64

10

New folder...7).exe

windows7-x64

10

New folder...7).exe

windows10-2004-x64

10

New folder...8).exe

windows7-x64

10

New folder...8).exe

windows10-2004-x64

10

New folder...9).exe

windows7-x64

10

New folder...9).exe

windows10-2004-x64

10

New folder...2).exe

windows7-x64

10

New folder...2).exe

windows10-2004-x64

10

New folder...0).exe

windows7-x64

10

New folder...0).exe

windows10-2004-x64

10

New folder...1).exe

windows7-x64

10

New folder...1).exe

windows10-2004-x64

10

New folder...2).exe

windows7-x64

10

New folder...2).exe

windows10-2004-x64

10

New folder...3).exe

windows7-x64

10

New folder...3).exe

windows10-2004-x64

10

New folder...4).exe

windows7-x64

10

New folder...4).exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    New folder.zip

  • Size

    1.2MB

  • MD5

    a1ab0b083ec03075d8d65852c980afa4

  • SHA1

    5126eb3bfbee49d3b43428160e9a6ca0abe87e19

  • SHA256

    316ea0c4d258091e2b51111511feea923d31c0f2c259214e0fdc7a3ad563bc7c

  • SHA512

    197ebeffb4889855361a1e9bfae26ed2ea9e44152f976ad809b08a1cc493c890325cd6ad1da8cd03c80a61b607328a9c8fb56a173ba040c3e39ffefff5289667

  • SSDEEP

    24576:e9sPWhwza1e1anE5Oro9iJU3U3qFADta1:H

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

printer-visa.gl.at.ply.gg:35374

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 32 IoCs
  • Xworm family
    xworm
  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • New folder.zip
    .zip
  • New folder/WaveBootstrapper - Copy (10).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (11).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (12).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (13).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (14).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (15).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (16).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (17).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (18).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (19).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (2).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (20).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (21).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (22).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (23).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (24).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (25).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (26).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (27).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (28).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (29).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (3).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (30).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (31).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (4).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (5).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (6).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (7).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (8).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy (9).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper - Copy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • New folder/WaveBootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections