General

  • Target

    8cf8b123fa4227e3281c277022899816f424ca8601b6a52a089b0584a5b9f5cd.exe

  • Size

    114KB

  • MD5

    bf546b552cbc956f6ae1efa2b4e90e8d

  • SHA1

    bce5f12f4f4e98379e6f0af9f356ef40cc5b9558

  • SHA256

    8cf8b123fa4227e3281c277022899816f424ca8601b6a52a089b0584a5b9f5cd

  • SHA512

    631b85c3d9837b715949eb850fd2b682ce7d6146f4ed420a26ce00581d4fc5c4504c2a2665584eca74fde1cf9b1d9002d8a47e06766d8e84e645f9d811b4c403

  • SSDEEP

    3072:lB6z4fT+bpmxds3XOnV2kQUgZ66z+n4VJ3bd8G:Sz4fqb0HTQhZ66z+n4VZbd8

Score
10/10

Malware Config

Extracted

Family

xworm

C2

10.110.0.10:7000

103.252.89.37:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cf8b123fa4227e3281c277022899816f424ca8601b6a52a089b0584a5b9f5cd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections