General

  • Target

    Patcher.exe

  • Size

    62KB

  • MD5

    fb4d99965ae692144064c486086eb68a

  • SHA1

    515894a8f5213ae0a2b5851f647d41256aafe135

  • SHA256

    2d8b5f90aa546ecb55199b495dae117d750b789adab8acd5b7e06394a8823543

  • SHA512

    846d0bbb2ebb04eeedba0b81d47a735e92bedb2e26716697a97131be20de812f5a8da35234fb1fbdee8bcc1dfca0481a1a3ac93582b28bc18acf93af8896af4e

  • SSDEEP

    1536:RYp5YQoXMORYXzLcNM9kb0h1QYcjSUOw361T464fUX8u:RYJENmkb0bamUOe64hcX8u

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:9999

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Patcher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections