General

  • Target

    2006Installer.exe

  • Size

    154KB

  • MD5

    db0d79ee69b9b11c0f735982b2920878

  • SHA1

    56834665009447daf0600013cde27645d919660d

  • SHA256

    c88f5abd89463b898933c9c9104b4dd46c182a4fcdf67855ae56d16f88ecbf01

  • SHA512

    da7e272794f13b28f757c6d9910b43e2fbb9d90618d20a7122a0f6769f95d7625a28bc1f4cae95764af82f8a23ea427fd63e667b146e3c99adc7c3c31931ba94

  • SSDEEP

    3072:OB8OkcUq/W1Q4iKfb0QnODcqYOBz65/M6If+3Js+3JFkKeTno:jOqq+1FiYbHqlxBt25

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2006Installer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections