General

  • Target

    DupeReallyWorld.exe

  • Size

    172KB

  • MD5

    649623561d3fb635f668fa0e8520ab9c

  • SHA1

    8c121c4cc423e26ff1f2cf2d8c7b81bc06f7188b

  • SHA256

    5b2f02e13a1f39a317671a164947d9076f93628328bd020b053720bd51223893

  • SHA512

    628f23cd79616646bc4030970744e5f9010ae9503ec1c11a53556df9d86a0e1f1175b4613c9aa4f8d4b1e8e8a2f57d4c36afb5a5bc7a00240b27a80369f3ba9b

  • SSDEEP

    3072:CB07DhdC6kzWypvaQ0FxyNTBfzvayxhZiuSjhhg+bOvrJdObO6ujec7:i0BlkZvaF4NTBLv9PZi7hhBby7OM64

Score
10/10

Malware Config

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DupeReallyWorld.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections