General
-
Target
371ae1cd6b2b01187a583b903fad5610N
-
Size
32KB
-
MD5
371ae1cd6b2b01187a583b903fad5610
-
SHA1
29dfbaba76d152bdf6a3e022153e1cef656d9ae8
-
SHA256
3eddfe1a4cb334ef161b7d9d6c31bfba1cf066f192095c48e03c369b21c18fea
-
SHA512
265f175aa126bb9f964dd228068ef7f27740560251ba53af64d584ffaedf077a60b894c32d0f1f967650e628fe87b328f44977cf8d5ec0899ee1b394833b3b3a
-
SSDEEP
384:tcmKc71F3BUaMbGf/JLbFJ3Tm2eaFOL1dRApkFTBLTsOZwpGd2v99Ikuis4VFxOe:Oa1LxMC1JJ3Tw4e1dVFE9jHOjhkbl
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
127.0.0.1:9080
which-anxiety.gl.at.ply.gg:9080
Mutex
TRii1NdwnExOOIf6
Attributes
-
install_file
USB.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
371ae1cd6b2b01187a583b903fad5610N
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections