General

  • Target

    cb2fbbc83bb274386200401dad510050N.exe

  • Size

    320KB

  • MD5

    cb2fbbc83bb274386200401dad510050

  • SHA1

    1fc99b84fb08236956f3605ef035c95963d87523

  • SHA256

    305e2cae3aa79de6e936e51a4d4a16a4ad5a3bffc35915699878185c01282c83

  • SHA512

    69c16364af8a6195af96e28b75dd4147ca2d2fe08a1a42db47805987b370c7974e523cb29d1c6bb8a3b6574afea4c7a9fc107c65e45faf894b3b677d7e0e47b0

  • SSDEEP

    6144:YCuj8ySY9bI1v+GIIIIIIIhIIIIIIIIIIIIIIIU:Y9gySYS1Q

Score
10/10

Malware Config

Extracted

Family

xworm

C2

157.66.26.208:8848

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb2fbbc83bb274386200401dad510050N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections