General

  • Target

    a48bfc008485fcda30ff6d023cda99289bcc51e16979a71e09f65d0de50e004d

  • Size

    91KB

  • MD5

    a79863529c1e4822b93ee15732eb389a

  • SHA1

    4f77582eeae3a8435f5cddc9dd5380344e5a2cd9

  • SHA256

    a48bfc008485fcda30ff6d023cda99289bcc51e16979a71e09f65d0de50e004d

  • SHA512

    0bcbfb1384957e4a7c928f03ccd76070a8db00a9dcdbc11c952cdea85971866bc8c1171e1a4afcf8905d030390eb6057d013f606249aeaa302533fb68602e706

  • SSDEEP

    768:9uIDzOKa8qQpCE5T26dBEuUEzbtSAlGizGcyVF3O3lTEi9X+fyFI:kInOKa8qQLbtSAEF3OwfeI

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    WindowsServices.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a48bfc008485fcda30ff6d023cda99289bcc51e16979a71e09f65d0de50e004d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections