General

  • Target

    343352ecf70fb1c3bcfc84f104a00e0b4f478ace9404ad19408eaa0a3fc9ffb1N

  • Size

    32KB

  • MD5

    cc3ee91cf2de0d54009cbafd95f77510

  • SHA1

    11dbde141c54f722435e33e9c48eefa6161d0f75

  • SHA256

    343352ecf70fb1c3bcfc84f104a00e0b4f478ace9404ad19408eaa0a3fc9ffb1

  • SHA512

    b4580d0637e57a9448cc2126c8712c2a9cb035adf72764555b99bb897fd49eb078b1a4093e53df8f07b55ece89f71e24e8b5959c02b8ec54116860235222bddb

  • SSDEEP

    384:jlRmhGD91SluSWhnHHxzLmYg3Tm2eaFO4FzRApkFTBLTsOZwpGd2v99IkuisWVFR:5RPD9OQhx/Bg3Tw49FzVFE9jLOjhUbX

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

spyo365.zapto.org:2000

Mutex

TVTpH8LYZlkXkMd5

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 343352ecf70fb1c3bcfc84f104a00e0b4f478ace9404ad19408eaa0a3fc9ffb1N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections