General

  • Target

    sct.exe

  • Size

    30KB

  • MD5

    720070608efb9768e2afb6f7f59980fe

  • SHA1

    43550ecca0bd9530201e64ba322a81e21d94cee7

  • SHA256

    52d430b79b4aebae803e805ff4154e79a3ea5b040387b6981fbe02a210481b5e

  • SHA512

    e3f95411a7472819224cfa0f6f1c325023d077e76bc7c03ac5fd7f3f7cee1facc2a92005e714e7287c4456405455a1d8b91a100823d56817022cd2a7b2f49749

  • SSDEEP

    768:Zecbl/b3AMYAoReJ2uBFE9RAEkOqhtbz:AcxNJ24FE9RA7OqzP

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

147.185.221.23:14947

Mutex

xhwEAi0tjKka4wPR

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sct.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections