General

  • Target

    1fd0c43e5b0c605dbe35bbcd941d282fd37b140124075b9d2e7a3ce41f893a46

  • Size

    58KB

  • MD5

    35cf7dc1f6a7e3afa4ba3bfcc6b0021b

  • SHA1

    9913eef293925663a1e4f1800158adef4d28559a

  • SHA256

    1fd0c43e5b0c605dbe35bbcd941d282fd37b140124075b9d2e7a3ce41f893a46

  • SHA512

    01d67e9b7a42963bebb1d570acd0de83874152ea9bcf3a62f3a8346a21800e04cbbdb5e3f087d98e0b40cf849731cb8d08d3538cd25709240a84cbaea6f74209

  • SSDEEP

    1536:3Hvv6B7flNK08WmBsvkkbxk/hLqOKmmd583:3H3o7qevkkbxMxqOlmO

Score
10/10

Malware Config

Extracted

Family

xworm

C2

device-replacement.gl.at.ply.gg:58903

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1fd0c43e5b0c605dbe35bbcd941d282fd37b140124075b9d2e7a3ce41f893a46
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections