General
-
Target
bfe68ab270686c489b2b0e4de084df10N
-
Size
43KB
-
MD5
bfe68ab270686c489b2b0e4de084df10
-
SHA1
0c85e4019c5772e00aa3beda1987ae969ba3e408
-
SHA256
ed47c7098773d5664a732ea3508b67864ad56aa3a2526dfab412f6ad4011b449
-
SHA512
0cf6a0c853a00f397f6bc1ac1c2f6b9014f4994f78db29898341fccccf9af9c9023a5be3c258f76c7d0c7c7f803cfd3ed378846fda47ebb51fd44ac0cc303ac2
-
SSDEEP
768:yskA2bbW8YIic3H9NBh/DVTF+q9jL+dv67O+hgbZYC5:BeS8PtNjdFZ9n+dv67O+yN5
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
147.185.221.22:14040
Mutex
r0QIb6qBiTJSvWxJ
Attributes
-
install_file
USB.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
bfe68ab270686c489b2b0e4de084df10N
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections