General

  • Target

    b1184c7cb6d005791da8d0997929aa40N.exe

  • Size

    75KB

  • MD5

    b1184c7cb6d005791da8d0997929aa40

  • SHA1

    e01a4548fa7aacaec30d1aa4288db632adc03a34

  • SHA256

    6b981124cd14350cb893e142898641e83434d7ec43c5c5e3ab5e2bc7a40df4e2

  • SHA512

    7a640862990daeb2f94ac7ee0d9691b589257e11b9c31d7d1c41837d46a995c695a43564bf70fdde55305c4d75a10625abc566f354a80eda3b90275d7594e99d

  • SSDEEP

    1536:5URWFoCX6t+HPYbtM9ATavyM6I73BIORRJaR3By:5q5iVHPYbtgA++OzJany

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b1184c7cb6d005791da8d0997929aa40N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections