General

  • Target

    B00STER.exe

  • Size

    32KB

  • MD5

    6352a53ce9d4493c4d2336555a09bdea

  • SHA1

    a75e56155755d1927254135327a6e4370cb795be

  • SHA256

    1b0f56cacc1925dff17b1f9d404c8b53dc21c7fc420dc885d123764d30d909d0

  • SHA512

    27ef2a55cabef395f40552adce921ca91c5af4ad969dee75598f4a075920729fd6dc03144cfd95072abead2e8ecc340ee80b6ef5e3f0529c0d006bff14aa7221

  • SSDEEP

    384:4EbmX5Qa+vN1h1+X3v6JFjL+g93Tm2eaFOL1iRApkFTBLTsOZwpGd2v99IkuisDN:9Va+vNtg+PB93Tw4e1iVFE9jGOjhZbY

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:7777

Mutex

zQ1HJ92nu9v8rXVy

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • B00STER.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections