General

  • Target

    1ac0f980815a02fd4b62e81709a1ef40N.exe

  • Size

    113KB

  • MD5

    1ac0f980815a02fd4b62e81709a1ef40

  • SHA1

    3e2495c19c1bcd31ef11b294a456fcb292ceda03

  • SHA256

    d6c0152c213974c9abf7b070f72a5f93c8732bad9c543976ec8e341453700367

  • SHA512

    4a63caeed8fac0134e61a912476b8fb6a3acb7c58722dbc72879ef116d7cb5589130cd8f8e494d1c261c6cf314f0a3b50d57ecc63a5d91f06cd12999cb27d1b0

  • SSDEEP

    3072:fJgCuQ8RgmEWbex37hf6dzO7Kq/QR8+tM:6E8EWbUNf6dY31+t

Score
10/10

Malware Config

Extracted

Family

xworm

C2

45.131.108.57:4050

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ac0f980815a02fd4b62e81709a1ef40N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections