General

  • Target

    Stabaliser.exe

  • Size

    77KB

  • MD5

    d8034322651de13ac8daa1442365f083

  • SHA1

    f923e8a7928564a868eb8896fd2cfc08124b6352

  • SHA256

    a31506356b07e1383ba044a2d256508d02b8e3aff53e3d9d7c7269bd94db4994

  • SHA512

    d5202ee25408d7fb3e66f68acb7be763b056183d7418d67c77de43ec36bb4334c85bdf9d17d5f770a84f7466bca25d6d4973a391f4b8720d8463138176b87971

  • SSDEEP

    1536:gd8T+FgjwT5Ov3agzXXbb0NLD7BnS65BJPOJcJ3gm:gd8f0Ov3zz7b0NjBNBlOJcJwm

Score
10/10

Malware Config

Extracted

Family

xworm

C2

193.161.193.99:46070

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stabaliser.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections