General

  • Target

    Spotify Installer.exe

  • Size

    124KB

  • MD5

    bc5700a69df9603345a08a90740afa41

  • SHA1

    7368024a45e8447f02350515cd0411eaa71752d4

  • SHA256

    f8bbe618817587ee1783a718e8634b1323e21b523111314cf6cebb17cac19279

  • SHA512

    8defc279af4c3a9039447e3a73135594075a73df0154fee615c11b470e4710faacaf7c7e9231fc5fa70e4d8806deb9324094b062b9686709ddddc4584ff891d7

  • SSDEEP

    1536:T6EFqabKh+Ca71OkbFeI7UhNWB9OSKGcV:T6yY+t1OkbsI7bB9OSg

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:4140

147.185.221.21:4140

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Spotify Installer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections