General

  • Target

    EBC Loader.exe

  • Size

    41KB

  • MD5

    ffc4a742b663272ca8b07992b366ea30

  • SHA1

    8377127f350ddd2ee4def8a21e6f5e3c35acbedd

  • SHA256

    cda7ee432a766477b517200302d9973c3c5b1d2432910e518bd9fe8f75868ed5

  • SHA512

    b029e12c5ce469e4dfc6681f9813be0f1d56dcd2e8d41bf7c2b2b5ea25eea3afcd2bb04ab425b496ace6dc1d9042b159cf582c0d9e20bd0dfcb3804972de0408

  • SSDEEP

    768:LsydlfynBbCJvxJui0NTxtYJF5PJ9OAl68OMhi3E1s:LsyfqnBbCTEi0xfkFz9hl68OMsJ

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

roadman-43811.portmap.host:43811

Mutex

XNkTwYaamsqu5k2t

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • EBC Loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections