Overview

overview

10

Static

static

10

8034047719...7b.exe

windows7-x64

10

8034047719...7b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13a3a030bf41cda79b4dfa40393328c0.bin

  • Size

    43KB

  • MD5

    006e2f4ffcbffa0b2d27371c2d86f4a4

  • SHA1

    1cbc6b03a9de0a7db8531925a5c78d21d5df96a1

  • SHA256

    990c6e6f73ed795319bc59208b3269660db56a73571a56c495cf68a9ea255d19

  • SHA512

    4b84319d3e3a80d08d51aed0b92f3a5444b54275038e03ed560c2a0372f2ba63265842955eaca3e4212cf504278d7e5fc942c318a31cd2e2a2d64159755058d7

  • SSDEEP

    768:fEGOo/c5migy4F5yIdd294xjV0hmK59aRZ9J3gAx+JF7ewFyqSnbLXRO1Q:cyEmAkdG5Ibwvz6wFyqkbEy

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

194.169.175.112:4404

Mutex

0VDEVqaa03SL6dGN

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13a3a030bf41cda79b4dfa40393328c0.bin
    .zip

    Password: infected

  • 8034047719a42f4e2b6dc9301ad6d6dc6072f7a69203df22ecfe633f11b2ae7b.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections