General

  • Target

    7e4d6957270973c5524ea82ee4e57b381dbfc908b9c467583d39e959402aec8e

  • Size

    79KB

  • MD5

    694dd66e6282177e76cbc3c77f2cb877

  • SHA1

    2940366596585b1d5d6494ee1332a46d609eeb09

  • SHA256

    7e4d6957270973c5524ea82ee4e57b381dbfc908b9c467583d39e959402aec8e

  • SHA512

    b8de0a940c0ce3f323a6187427d66295728f8672745646328111fbd0bb4311780f38d09555b00246e3203c0405148a742e96a130dd1fa5a0d53d514ebdcfb258

  • SSDEEP

    1536:8TVTz2Nzsij8PXNvXPdrb0knGd12CbCTgz60XDODAfwT29LfVW6l:ITz2NY3xbPGd0T0DODAIC9L3l

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:35578

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e4d6957270973c5524ea82ee4e57b381dbfc908b9c467583d39e959402aec8e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections