General

  • Target

    MAIN.exe

  • Size

    64KB

  • MD5

    752b26aa8800ff82f1adda12e0edcdcb

  • SHA1

    42f4801d7e21ae17b7e13a5a164934e898df65b0

  • SHA256

    5de6e718aeb473098997aaa9c2eaf3047b7bd001046be2dbc977aeb7fce093b0

  • SHA512

    701c9bcebfd77c4c7a60e706fa55248ffb96ee5a1257046a92cb3574fcecca88b3fe7540055d65758532a9e2f294c4f24536352e781f3724f11fb91a5e7e71b7

  • SSDEEP

    1536:0WLO/VrDP6vUjxI+jTzb5LOv1BV8lW5Z+JOLQgc2U:TvUj53b5EG+oOLQqU

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:33171

Attributes
  • Install_directory

    %AppData%

  • install_file

    island node.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MAIN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections