Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    obfuscated.exe

  • Size

    175KB

  • MD5

    b331f3878db03be5b2f909234c0fa346

  • SHA1

    50df973b5d113615c272069165b729cde5e2a822

  • SHA256

    f56dba5cf346b11c5592dee4b7dc4011c61aab04e5bd203ff41db9ae3ee7ee42

  • SHA512

    0b466a75b82eda66421b27499e06035dc08311801ac33cd0a9b670987ea2fb6ec96e88f0824112490d5c6cbb0fb386ad33ba33dbe3966d807fe9712a98539dc6

  • SSDEEP

    3072:cB2mwxAOi6Io4cbMQvjRO9bUuM+lmsolAIrRuw+mqv9j1MWLQD:K2mT6IoFbrvj7+lDAA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

reason-warnings.gl.at.ply.gg:20382

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • obfuscated.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections