General

  • Target

    asdssss.exe

  • Size

    67KB

  • MD5

    8eb6c464be892fa2fbd8be5c25268ef5

  • SHA1

    65c2e31ecd47f42c8e36dd78b30480cbcb48f5d9

  • SHA256

    485371308cab9cfe8433dfc0879006930149232933f5560f4c9a34c870261804

  • SHA512

    981fee685b956a5b64265a77ad7e267273bf04b13edd8f3e7ea1962fe24935ed8c6f71407b44a06d4a5acc9def0097fba5fcffc3dc114e6b9a48b19cff007f77

  • SSDEEP

    1536:LBmfXsw+4BBNJGfOTY/xN6okbM2E+0U+yfHqsk2cAO3hr1+:wsh47M3TkbMHU+yfKt2cAO3h4

Score
10/10

Malware Config

Extracted

Family

xworm

C2

gtagfan211-37342.portmap.host:37342

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • asdssss.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections