General

  • Target

    WaveCracked112.exe

  • Size

    264KB

  • MD5

    629c7dca197202c27afe88e229a94f59

  • SHA1

    af8fe3362da3bcda59dccc18ca3ee7befe8cc5a3

  • SHA256

    65659503225780ac89eab54024090c5c2d133929e0f62bf89bfecb51cca1d113

  • SHA512

    938556547fac7d4d66766d45711aeda6054f3cef6656f1436d3a56ef258f515869e25e135d24bfacdb0a5163477704cc473f08cda66ba03b1086c0879ec1afe3

  • SSDEEP

    3072:cALXpKbWIBuPOqjwItyLAsNeDF5nI0PGIj9lua/Obw0hFv2PCWpIdp:BUbreo0sNOBTunbw0/5Wp

Score
10/10

Malware Config

Extracted

Family

xworm

C2

told-contacts.gl.at.ply.gg:9726

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WaveCracked112.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections