General

  • Target

    2024-09-11_7f3824a1c96fc1b42fc14b296064d5ab_hiddentear

  • Size

    172KB

  • MD5

    7f3824a1c96fc1b42fc14b296064d5ab

  • SHA1

    de4c4f60954de95d503dfaea4b45cc3350043887

  • SHA256

    f630050d823b44aa05eb80e771a77424a96042b828dd952e881d4307b3ac3db0

  • SHA512

    a89b76edb09c471a37f06029aef252a988381cbf26144a98915865b683aa621c523b3883c6f2b1679860cceee95ef39013687e09ed4651668706568b120d794c

  • SSDEEP

    3072:C9ymEaHTUe0jbhbmEi2ptOtBvzM+lmsolAIrRuw+mqv9j1MWLQb:C9yAHTUxjb4RBQ+lDAA

Score
10/10

Malware Config

Extracted

Family

xworm

C2

147.185.221.20:45130

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-11_7f3824a1c96fc1b42fc14b296064d5ab_hiddentear
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections