General

  • Target

    be5e4c1450e7673500206a30bc02b96351906d45522e137a687c9f93eced0614.dll

  • Size

    2.9MB

  • MD5

    32936373efb0ed64f9f0c4e7758092b1

  • SHA1

    f65e5b36d525688f89ce69c2312816d70bc0477d

  • SHA256

    be5e4c1450e7673500206a30bc02b96351906d45522e137a687c9f93eced0614

  • SHA512

    91c6f7468e07be5199181bb54bda70f417c2db293d8fc475184cf085c14ad4e4aba77bce5cfd9e032d1ab3f8761078ed46d4b3381c76414817480377ac4c6569

  • SSDEEP

    49152:PO9hnRJ/JjXTVFi0en/CLDzKv63Tu2jj6Sq03xg/pOFMy:PO9hnH9XTVFd2/CGv63T/5

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

crypters.ddns.com.br:7000

Mutex

GGGrHP0Odh89zLnb

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • be5e4c1450e7673500206a30bc02b96351906d45522e137a687c9f93eced0614.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections