General

  • Target

    XXX.exe

  • Size

    67KB

  • MD5

    9b5d52bca08fc5dacaf2d87afb69e9d3

  • SHA1

    418ab74273f3606351af034c44a54a7c3e69d286

  • SHA256

    7e2f9818569959559478687f8f1aef499416ebbf60fb7dda44d15f1d9c52d0ba

  • SHA512

    42078d87499378aab063a27f263d8279cca80468d3a32c2d433d3e0cce9328862db17e06b86bfdb58bf852edbacd97465cbd00dd296f5f1b813e8504b18b2679

  • SSDEEP

    1536:BpLNj7kEZjGHPMvIaRbbBm1dqd6+fOgGRqBdz+6+LI:BpLdBCzabbB5fOFRqrz+bI

Score
10/10

Malware Config

Extracted

Family

xworm

C2

series-ate.gl.at.ply.gg:62459

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XXX.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections