General

  • Target

    test3.exe

  • Size

    107KB

  • MD5

    88d33f7474baa14508fec1dde43fa417

  • SHA1

    e97be7f283e26ec58db8d184e59a6c66bf820126

  • SHA256

    732b1c97eac8dcf3eb4c3b36dc0b09d87b98c56d977754aa48690f3c97adac66

  • SHA512

    c1966ed0985cabbf4714eafcc2f7a56ef6e745f0c929bb59f93952c47239882b95eb9aa102dc894d2e2f44ddf0ecbe4b7ecf444003af54cf1cd62739ed08a186

  • SSDEEP

    3072:wuwQjDHBmHP+bAsOPwJHOscrNQUgZ66z+n4VJ3bd8c:Rzomb+PTJQhZ66z+n4VZbd8

Score
10/10

Malware Config

Extracted

Family

xworm

C2

103.252.89.37:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections