General

  • Target

    2740-33-0x0000000000400000-0x0000000000410000-memory.dmp

  • Size

    64KB

  • MD5

    24e5178d9fa037b292953f025de3a72d

  • SHA1

    92cba36c83b54660a42ee0039e02b35f8e7f87e3

  • SHA256

    e58a44cc332464a6f71dfcdbd0a599772e57cda8a0a3d0b1691506c472c57249

  • SHA512

    4ec774613acb2bb7d4e715f152b5c6844e26b4715f2e90334adb3d1c81e8c77af85584be59cad9258c4324824113c480139bcd1c3875ac0a3a5e87ff01ecee44

  • SSDEEP

    768:dQ2A5Unv1+tybbHfzASLKyNbFf9YrOMh03XPq:62A5Unv1+oHHbVKyFFf9YrOMGPq

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

195.154.49.246:2080

Mutex

Wxez4wHXX8E21z87

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2740-33-0x0000000000400000-0x0000000000410000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections