General

  • Target

    1aeeee6a7d8b3c9bfd6db9307bb4d74c6c9f237f54a1fbdde296921bd00a6109

  • Size

    58KB

  • MD5

    cea4fd68cfee5ef55247abee5ca86453

  • SHA1

    29d9b0001a964e21aa1a694981489b294197780b

  • SHA256

    1aeeee6a7d8b3c9bfd6db9307bb4d74c6c9f237f54a1fbdde296921bd00a6109

  • SHA512

    df7c3299d4e6d6ce9dca4081556a274e4232a05dcb99560f21aa0ae4f2af9501eb561733b85df535210eb558c9d5df4e259007b01f489426abd01f548dbf790c

  • SSDEEP

    768:XjxuZTIUYkCDrNN4IVYFuHPnUZAZ69gkbvX3sgOmnUtwcKthIOb+WSOHheDNNpk:XoOUW/zpvUZhakbv3smXgFOHSHk

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:48802

those-situation.gl.at.ply.gg:48802

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1aeeee6a7d8b3c9bfd6db9307bb4d74c6c9f237f54a1fbdde296921bd00a6109
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections