General

  • Target

    abd28288c2f4dc2eb44b6940309c5dd772124d0fedab0664ff9d5dae6eb1506d.exe

  • Size

    33KB

  • MD5

    4618efc13211a682b44c248326ed914a

  • SHA1

    834d45aa57691327e896c485bd6d72c0a79680a2

  • SHA256

    abd28288c2f4dc2eb44b6940309c5dd772124d0fedab0664ff9d5dae6eb1506d

  • SHA512

    3d257358cbc270a04eb9e29c5b602e8af460d0eea2358315a40a0a0dd1f63c41703d8d51dc13c642cb09f11be219bd5669618fd08dbf8be2d54055740b9a445e

  • SSDEEP

    768:eXGQHJVcAiwkFwYqimZoVFY9jaOjhSbp:MGQH9kSqm0FY9jaOjgd

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

yourself-member.gl.at.ply.gg:6852

yourself-member.gl.at.ply.gg:51770:6852

Mutex

WSylgOpSlNAMV60k

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abd28288c2f4dc2eb44b6940309c5dd772124d0fedab0664ff9d5dae6eb1506d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections