General

  • Target

    nigger.exe

  • Size

    62KB

  • MD5

    6cffd409d1e3a1a446fae15796f29509

  • SHA1

    1b502700dd33751c64da20807e61b2a0dff0a930

  • SHA256

    3dae4c211901decdd6381c72f584bea8f0604a954b44d98ac9c406d0e3730d03

  • SHA512

    c43130dfe3b25262570e01abb4fe4bfb0825436f093f114a33706174927d39ee3c1048c6fd47e5061730438e9b1776b306a51e60491d2c100a53b6704a373346

  • SSDEEP

    1536:IecJgnuA0vUsnTvxT+bRgP3IS6eO4MOY2:rP0vUsnTv9+bRggiO4Ml2

Score
10/10

Malware Config

Extracted

Family

xworm

C2

147.185.221.23:19686

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nigger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections