General

  • Target

    mypcisratted.exe

  • Size

    75KB

  • MD5

    82fcc0836fa409c511ba133b84645e61

  • SHA1

    a4e04642d1b9bb29f677ffe5ff7090917e941347

  • SHA256

    a6226d0fe1c2f49f818f9c8da8b256148f048f6182cd800afa3e72edbe0228ca

  • SHA512

    20d094193dad1786aff906f543538b5d9ba15a74a1bf9b547fd0b76af3854417e1141ac9c4a7aabd06b93038e3133492ad295603ea6021fceb67b9146f26ada0

  • SSDEEP

    1536:aJSoKY6y2ehOryeZZ9W5lxAOUBtYoNbMXdcZ3MC3HeO6LvJYZ8P:aJS9yNhiZu3hUBxbMXdaneO6LvFP

Score
10/10

Malware Config

Extracted

Family

xworm

C2

web-yukon.gl.at.ply.gg:17223

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mypcisratted.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections