General

  • Target

    Bingus.exe

  • Size

    88KB

  • MD5

    83a881587aaf48287dd220ae866ee4ee

  • SHA1

    d1bb7a37f1ff980c0773475fd18ce359a5b22d94

  • SHA256

    a07efee7bf6f2f8244db2454e4867f164964c78376a3f918a4c981b05acbd4e2

  • SHA512

    e80042e9729e7cd8ea56444e55d4aab516957060fb4861987e215c1b3d1b53bc6f676ab7d4bc1bb373e97d743de87423d195c8950da2f6a5f6c4aa0f15a2b105

  • SSDEEP

    1536:u2qLr2ozu7/weFF9IOVOMquSvJfcFUgZ6odzz+BREZVJ3bd8su:u1r2P/bFF9IUOM2QUgZ66z+n4VJ3bd8f

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

103.252.89.37:7000

Mutex

fYP7SctzeqiF1TN0

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bingus.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections