General

  • Target

    cdb82e0d2ce46129e87eec0474eda72f32213a7c79508ac3b4ea40229d1099c1

  • Size

    70KB

  • MD5

    0e48066818ddd0e73b6714190ecf7a3c

  • SHA1

    a314923e566b643bd2ec286352f74e0728118fbd

  • SHA256

    cdb82e0d2ce46129e87eec0474eda72f32213a7c79508ac3b4ea40229d1099c1

  • SHA512

    7d860f40c629dc349a9296275a6218a8619c76958d23b587e8175b719970223b183b963b68ee67596d4057b884da644801df52e62cea35ef74fd197467fc6b9c

  • SSDEEP

    1536:ItiGpJIiv35U4gCg0ScbRFoxNM6ps4OKL48Q7rL7:ItPp1U4gCBbRFKNU4OK1G7

Score
10/10

Malware Config

Extracted

Family

xworm

C2

21.ip.gl.ply.gg:5795

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cdb82e0d2ce46129e87eec0474eda72f32213a7c79508ac3b4ea40229d1099c1
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections