General

  • Target

    sct.rar

  • Size

    14KB

  • MD5

    f9b4087262ea286bb4d8b53f3056bace

  • SHA1

    3007891bb375cf913b4ee928417bb63211b3e896

  • SHA256

    f6994ff81466f8c668060ec0486bcda7a010ca12d0c26b908102fdfbb3a7fe5f

  • SHA512

    7713884b76fbef2075e7e486343846a09535317d03d815a53c123581d3fe7c16884394d6b81ca401b616957f9ccddd874b6403d69b7d7ab2190b474fe6d6ea29

  • SSDEEP

    384:GnZ5GLomWQciksgPFfUWm6KkmVN7BD6vth:GnPG8HQRksSfUn6unB+vth

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

147.185.221.23:14947

Mutex

xhwEAi0tjKka4wPR

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sct.rar
    .rar

    Password: 123

  • sct.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections