General

  • Target

    main.exe

  • Size

    236KB

  • MD5

    2052576ab280569016416a4e832e0d54

  • SHA1

    7e9ae14ba96e173ba720400de13e92391bf05bad

  • SHA256

    9ae671f4cd8e7548c1ab7bc67355245109aa9971fe54ed6cda32f18337828fe2

  • SHA512

    eeffbf369216c16512971867780f54d4493cab97542dee5198b50c892c90451c95fe373c42808b9622d66e60af6b1ad27f75e1ec36d38bc6d96b0f43992ba4b2

  • SSDEEP

    3072:gMdXyb0/fpGOp/vAms8SKfbzxcwg7es6/Vsb8VKTu549oJMfF/H9N3Ky9NzLnt:DUb4sUhcX7elbKTua9bfF/H9d9n

Score
10/10

Malware Config

Extracted

Family

xworm

C2

y-lbs.gl.at.ply.gg:9999

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • main.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections