General

  • Target

    0x0005000000019aef-41.dat

  • Size

    81KB

  • MD5

    cdff2cee70c00c73f066e1c9a7515a95

  • SHA1

    f8bfe41193a917830dc13450c2665d862fea08d1

  • SHA256

    f52798a690f661a2b30e2fb3a3689a0aa09fcc0f7ea4efe669e265670742254e

  • SHA512

    747a63e7bc184d7fd09f842c176090bc37c88166155b4429faf430760cd8af182c853cc173c62a25ce3c94ccd74b66106b145f80bf5bb151e6b9bb865f23a939

  • SSDEEP

    1536:0Bc9517BL3XexpnqiZbIYKgPYo6cOrRNsOz9xxx1ofynMk:0W9X5NiZbIYvjOz9x1ofzk

Score
10/10

Malware Config

Extracted

Family

xworm

C2

projects-pf.gl.at.ply.gg:55284

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0005000000019aef-41.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections