General

  • Target

    virus.exe

  • Size

    56KB

  • MD5

    bc44e44d0789b1241d24672a6b4583b8

  • SHA1

    8d12b989d42b24558df9ff0089562ef8e8b648b8

  • SHA256

    5d9b26f74928e8248fee1c46c92d42f58f76d0086939d26662e2ee1c11138362

  • SHA512

    6ec5873a4f1bf31ba358046e2ac6da877fa38ea7f7bfe0ff8046ef14b44dd8f475045a3e79280c0d2f4b5e406bc43f0fe658c1124cfaee40847772f23dbc84d1

  • SSDEEP

    1536:y7vwJaCuS/kQ0vGkb+4qF/DF9HtG4OLEkJ6:y8Ak/yekb+nhpnOLE9

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:45767

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • virus.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections