General

  • Target

    c3bbb675ebfb5dc5d747551529c7feea42f8eeef6675d.exe

  • Size

    32KB

  • MD5

    e5f31c2d85adf65d285841220280cf4f

  • SHA1

    67277c68a170e03f4445211fbabf2b09995a98cd

  • SHA256

    c3bbb675ebfb5dc5d747551529c7feea42f8eeef6675d76f37afa87bcbf02ab3

  • SHA512

    ab5dc9ab8658adbb7ad5410de895834c72414214b616e1610b874ed885f68cd615c0fcc9afe017e77e0c931d474bdd580f70a0487170a84bd2cf973685fbb26b

  • SSDEEP

    384:jEbmX5Qa+vN1h1+X3v6JFjL+g93Tm2eaFObJdRApkFTBLTsOZwpGd2v99IkuisVj:wVa+vNtg+PB93Tw42JdVFE9jdOjhmbM

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

89.110.95.189:7000

Mutex

imlO5snuY8Gb0egY

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c3bbb675ebfb5dc5d747551529c7feea42f8eeef6675d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections