General

  • Target

    hix.exe

  • Size

    64KB

  • MD5

    123d31faaee2f2066caf43e1e7bfbb08

  • SHA1

    d0d157dd90a4a1debd9ce16b5dc1875ae8979c6e

  • SHA256

    bae421420cd119f2f9fc79e71cad6e61848ace3f59525206086ba2353d979451

  • SHA512

    9834244deed2a70cb4800f75803f8ce5fd3faa741482eb851c93e566557ba00a5d21fe920483f675b452e9daaa970aeef7c500e4c6c1c3c9ee56ac70973105d1

  • SSDEEP

    768:mwXIkOo/eRIQ3Y5vKbBcK6ONgCTGWi1IXtlXbuNvQYi6+FyOZhUeG7caHCP:/3s6vuT6IGj+t1buFfi6+FyOZJaiP

Score
10/10

Malware Config

Extracted

Family

xworm

C2

distribution-between.gl.at.ply.gg:9999

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hix.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections