General

  • Target

    6edb184cd11c0d4480c3f2c7d962ca49834abd62f8a674863ee3179962658f9f.exe

  • Size

    33KB

  • MD5

    631e418d348797555ab28626ffb0dd88

  • SHA1

    460054a2f9052ddb9c53a1fdfe71d5dda9e18e48

  • SHA256

    6edb184cd11c0d4480c3f2c7d962ca49834abd62f8a674863ee3179962658f9f

  • SHA512

    a8e72715a7a9cad22056c7a671c41bdfed939df8b1f21db4cfb496c4f4f23b4e123337ada4cfc700819cc7b870ab229749f06cf22a2e6768cda5b122d752037c

  • SSDEEP

    768:9XGQHJVcAiwkFwhqimZoVFY9jZrOjhNbw:5GQH9kSTm0FY9jROjvM

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

yourself-member.gl.at.ply.gg:51770

yourself-member.gl.at.ply.gg:51770:51770

Mutex

bzs7cQqZHSIu8YKv

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6edb184cd11c0d4480c3f2c7d962ca49834abd62f8a674863ee3179962658f9f.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections