General

  • Target

    Virtude.exe

  • Size

    40KB

  • MD5

    b3b15935559f74aac66ce1ce025f9b2c

  • SHA1

    e31e5cff9413066fda2ec68ff74bf6cd12b28ebd

  • SHA256

    f3f3df57c711d921954e1f69e76a866151280e4aaa1da1e9b40138b1c752840e

  • SHA512

    ffb4e64e0541cf4256e3064ef5900c15b72212172376314f68c7059932a833d44c501fce7f7ae121f99a2f8627078257792ad15d7eb86b55ec13d88f3723f960

  • SSDEEP

    768:afw749swluM7R1Acpo+I2tMmy9LKdV2smGoRV:as4iA7R1Atr2yehAX

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Mutex

C4IfcDXwG94kduZT

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Virtude.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections