General

  • Target

    0e6def6ef51ebdb878f9441a2b0388c31ad33e0352441e3babbfeed685cb6675

  • Size

    153KB

  • MD5

    8a0e754cf33ea1a272fe03edd2aa1fb2

  • SHA1

    cd5bc5d795b6a0801d4bd49953853bd18d49fbc2

  • SHA256

    0e6def6ef51ebdb878f9441a2b0388c31ad33e0352441e3babbfeed685cb6675

  • SHA512

    bef0894287fa9fa4c5f60bfaef822b33b8c507e17509bbb11614dc52d12650f0dea6c3c639109fd311364b39fec39411848b2db720eb258b42ce701614edb450

  • SSDEEP

    1536:ew+EhndWrCLTkkb8CJvhm0Y11OvOmucpysa7iAMw:ex4+CLTkkb8Ms0e1OvOmhpYuAH

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0e6def6ef51ebdb878f9441a2b0388c31ad33e0352441e3babbfeed685cb6675
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections