General

  • Target

    8111cfdc1f779c51c43334801c9bbee9929ff55d634aa305e2edbd1b854b6ae9

  • Size

    37KB

  • MD5

    7faf5aa5800a4e2e2ee8ecff39cfdf38

  • SHA1

    a3f04a7960fdf7709201db7ac6175f64b152c623

  • SHA256

    8111cfdc1f779c51c43334801c9bbee9929ff55d634aa305e2edbd1b854b6ae9

  • SHA512

    f1b071e50fbdd782326faab82f2662f04c81d86d8929444f8d664b27a2bc979048f4fbbfda92fde42086a75a12c9c1b24e735c1bf3dca650125d14523b8e49d7

  • SSDEEP

    768:wX9XtyDkbZ+OSQkjiBP+0FRaFF9W0726sOrh4I7yW:S99yDlOHJ7FgFF9jq6sOrGC

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

daddy.linkpc.net:7000

Mutex

8St8FT3OWA0vsGTV

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8111cfdc1f779c51c43334801c9bbee9929ff55d634aa305e2edbd1b854b6ae9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections