General

  • Target

    194be2c9585a5d08ea789bee9510684f90fbeb8545bb21ef8d5c66525a0447c2N

  • Size

    30KB

  • MD5

    28a1d9727416bca18eaac88b391917a0

  • SHA1

    d23f7391b81a7a973a792a0f3cc96fe050601c86

  • SHA256

    194be2c9585a5d08ea789bee9510684f90fbeb8545bb21ef8d5c66525a0447c2

  • SHA512

    782a8ce558c17f813939d0c94fbd0883345d5efa882bb7786e0944e589aeb9001d5142cc15a60705beb0a4e58e1e146c63c3e02ad90438cc0aab23bedccf51c1

  • SSDEEP

    384:U2458Ytf+1mOEUehuzD2LZX01uYTE6QmRuptFlBLTIOZw/W2Zvn9Ikn1XvOxOqhE:w+1mOE1yG6u4Cm0FG9LKOqhlbG

Score
10/10

Malware Config

Extracted

Family

xworm

C2

147.185.221.22:3944

Mutex

QyV0mkvpuraBKuZT

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 194be2c9585a5d08ea789bee9510684f90fbeb8545bb21ef8d5c66525a0447c2N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections