General

  • Target

    windowsUI.exe

  • Size

    64KB

  • MD5

    33a8c011ebe78a5743b06699f91791e4

  • SHA1

    4042168adabda1ac2b3c616c20a549f4babebaa9

  • SHA256

    37f1f16fafae0e4cb2f80d5e30135b8dcaf054facc3f978ae341ac9e0107b5b6

  • SHA512

    f1154e22759b7eb2c8a0742dd2eb832e4333491c55ef85d4c7de033e9a377b7f063ed656816bee9601c6279dbd1d91bb9bd07a0fe95aed22cd066227fc6e1b1a

  • SSDEEP

    1536:i+mw7o1xXClYExOz6yybwMJRkHodIgpywOOFNgzN:/mLLSfO9ybwbGISywOAQ

Score
10/10

Malware Config

Extracted

Family

xworm

C2

february-sheer.gl.at.ply.gg:46545

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • windowsUI.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections