General

  • Target

    884de59cc526cdb2fbc88f64fdf8f070N.exe

  • Size

    41KB

  • MD5

    884de59cc526cdb2fbc88f64fdf8f070

  • SHA1

    7d8f5a0ff01ffa59a755efe91c9640259dd6a79e

  • SHA256

    5c131038b29c092dcd4f170fc9db032948fce96cb03fddc2571f8384fbe3257b

  • SHA512

    e4aa6793cc461a495a4ce65e25281acf7785fca0b3797663c7e79c181f7b11c2a399fbc7dd5bc13c2b68f6e3d6b4aebf5d969a9d336834f4aeb29b6e5f236d68

  • SSDEEP

    768:Myuoucs9i++9KhHR4MX79Y40DpF9qvzaQhLOn3pGni:1uoQAsIF9ql1O3pGi

Score
10/10

Malware Config

Extracted

Family

xworm

C2

seller-players.gl.at.ply.gg:62639

Mutex

9ozwjOi85C2FfgoS

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 884de59cc526cdb2fbc88f64fdf8f070N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections