General

  • Target

    9c0caf3f365a7801187d02fa694cdc50N.exe

  • Size

    59KB

  • MD5

    9c0caf3f365a7801187d02fa694cdc50

  • SHA1

    8e5dcc6ae4e3ce43e4adaf97f4fe451b222b303c

  • SHA256

    3bb15161ae62719218f2fbb8b79bc1fd85f2f80922d466682525234bab4b75c3

  • SHA512

    ab67a7065d0eac939bc6ee5a99b9e62bcb7b9fd2130d7f9d3d91bd09978fa564b0703dd7192e0098a7a6c7c2975840f3418ec3bfc552921543599b93fd1d28d8

  • SSDEEP

    1536:9D4ZqlG3w26v63CRQz39/T4+bRkyZ1Ele6TfOr2eA:9UZqlG3wEGMl4+bRLOxOr1A

Score
10/10

Malware Config

Extracted

Family

xworm

C2

192.168.0.24:8888

dane1c-56094.portmap.host:8888

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c0caf3f365a7801187d02fa694cdc50N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections