General

  • Target

    WindowsUI.exe

  • Size

    235KB

  • MD5

    da13549112b8c13cfb45fcf3aa1df0a0

  • SHA1

    b34fe10186ca594953a4633ca30eba736629a51c

  • SHA256

    681c2e0b0685d36cba43fca9c4d22fea911f7e5dc71050860355ac49493fd59f

  • SHA512

    9558a8af00df1cbc6dbe375da1420cd59ae34982bb0a219bfe450ea643cba2269a5ccbca215bc923b9dcf058f2fdb90d0471bd5c342b56832391c13c17f00bea

  • SSDEEP

    6144:BCPnHsxsu9n/5bTgVziHzZnSKrCbYME+ubo8Dq:kni/5/gVziHlBrCbYw8W

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

Attributes
  • install_file

    Mason.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WindowsUI.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections