General

  • Target

    8034047719a42f4e2b6dc9301ad6d6dc6072f7a69203df22ecfe633f11b2ae7b

  • Size

    99KB

  • MD5

    13a3a030bf41cda79b4dfa40393328c0

  • SHA1

    ec035165866b83cf821600efe152d9afff4d3a6e

  • SHA256

    8034047719a42f4e2b6dc9301ad6d6dc6072f7a69203df22ecfe633f11b2ae7b

  • SHA512

    99b8e9a9b71bc6596c316f45e040824b83fa81435aa966c556cc79b9550b48b8f7cc571e2354d58a0979d7a35f715840ae28cc4afc94c22da12f84863d9f3886

  • SSDEEP

    1536:g4hlqp8hIBRnSu4+cwQBUtFFqvRQFRWnMGEDNoAhBdtfPWklPBP3OS:HhTIBR/4xJBIw5ouEDmgdtfPHPN3OS

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

194.169.175.112:4404

Mutex

0VDEVqaa03SL6dGN

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8034047719a42f4e2b6dc9301ad6d6dc6072f7a69203df22ecfe633f11b2ae7b
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections