General

  • Target

    95931b4531f538137929756d736735981e7d7bcf4d43a750fb1bb01c76b3219f.exe

  • Size

    32KB

  • MD5

    e5937a618f5d6f059974cf27804df37f

  • SHA1

    bce00ca4322d18aaf5856d5f884d03fffbda688c

  • SHA256

    95931b4531f538137929756d736735981e7d7bcf4d43a750fb1bb01c76b3219f

  • SHA512

    f386fdbe891893888123b8dee38b7fa1a4b7e96177bd360fe447b7c1ab5f3b2a3d5fe80275a582b1fec324a01427a0d7b37be6ffe6f78983051d3623bcad7b96

  • SSDEEP

    768:HRPD9OQhx/BV3Tw4OlzVFE9jz8Ojh8br:Hd9OW/V3U4OnFE9jz8OjKn

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

vecotr.viewdns.net:50000

Mutex

N5Yy5TM3WOXfdPYN

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 95931b4531f538137929756d736735981e7d7bcf4d43a750fb1bb01c76b3219f.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections