General

  • Target

    4d7eac862ef7af52c6e8e4147ddd6ceaf30d8920f2d4d912c1dd02a4d803d571

  • Size

    130KB

  • MD5

    40bd22716c5183c8a362cf017ff5c736

  • SHA1

    ed8cb214312916514a6b60efbca04a2e42b739ee

  • SHA256

    4d7eac862ef7af52c6e8e4147ddd6ceaf30d8920f2d4d912c1dd02a4d803d571

  • SHA512

    cc3acaf07be3a0733aa12225cda161885f7e2e8da7b043874dfe44bb67afed9fc37df6936ac330af9321b06d1a8152e49b1b4a25da379e15f523523a3ed6d8d9

  • SSDEEP

    3072:9c9Vf3F89j4OjHM+lmsolAIrRuw+mqv9j1MWLQf:9U89e+lDAA

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:7000

192.168.1.1:7000

Mutex

rRZFv4ku85GxNVy3

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d7eac862ef7af52c6e8e4147ddd6ceaf30d8920f2d4d912c1dd02a4d803d571
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections