General

  • Target

    e.exe

  • Size

    47KB

  • MD5

    3326f46b4b68ab8eba2b179b581b5635

  • SHA1

    6ec2b472522e4ce5fbce7b1c9a367cddbd7103a3

  • SHA256

    bacf1812bf000b55c159dc7d1b03dff10411bb76c53ce90f6ab2626633521a60

  • SHA512

    fbebcf0bf828746250ab4e76fd8b49d0b36e605c10af8328e680c277773e9a69d94f6ff79c14b99a0cf7c80b348198043aec07c690d27a9b227a3b0f240d40a7

  • SSDEEP

    768:6bOruthGJVKMs+DjNxdT8JXHRraBLx9QpiPmhLOn1wXG:6cunSUYrdIqx9Qd1OCXG

Score
10/10

Malware Config

Extracted

Family

xworm

C2

born-brandon.gl.at.ply.gg:55020

Mutex

2VgCgT29DLEflj6B

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections