General

  • Target

    159ce9d746c62ceb2272b404a4bd701a7f449e7b60c814d1e1fce0ea2c1d6fba

  • Size

    59KB

  • MD5

    d8a1f6a5e7b82c69c29cca0241d9a6fc

  • SHA1

    a142938b2944ab9ae2b45ff0ca5b3d9ed5e9d975

  • SHA256

    159ce9d746c62ceb2272b404a4bd701a7f449e7b60c814d1e1fce0ea2c1d6fba

  • SHA512

    178f37cb97bad6b5f4dc98719b08203426b462e507478709b4dc254e7eff72f2de7b974aa4162745e0b914baf3af16f3ac33fe0c5ee9fc05e14d38d66ad21bc1

  • SSDEEP

    1536:fmUnegdaT6YCFsXkbKj98h6SEfAbOI/vo:fivOYCEkbKeh6SNOI/Q

Score
10/10

Malware Config

Extracted

Family

xworm

C2

181.214.41.56:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 159ce9d746c62ceb2272b404a4bd701a7f449e7b60c814d1e1fce0ea2c1d6fba
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections