General

  • Target

    c346655d32844eda0a9ec3d3d9b16c1c27248bda424fc8b91804d26cd8986454.exe

  • Size

    77KB

  • MD5

    a307d64f791cb555d029c214364162d8

  • SHA1

    04f134fd1a0b71e0b4b745a97e9a08ed1ee45c74

  • SHA256

    c346655d32844eda0a9ec3d3d9b16c1c27248bda424fc8b91804d26cd8986454

  • SHA512

    d432bcf7874ea3f74ec7e4fc51b400f7c3492b06479fd12949b7cde698e513bbabd08afae8d0ffc2efbe3d7d0cb44e08c5b2bba3f116b9fd6120713e2cd5f96e

  • SSDEEP

    1536:x5sFO8g/9VM5dQ+aomobhr3KXg6wzOB1SmOnU7Ua+G:x5sU9Vv4bbhr6SOB1S5nU7MG

Score
10/10

Malware Config

Extracted

Family

xworm

C2

left-noon.gl.at.ply.gg:60705

Attributes
  • Install_directory

    %AppData%

  • install_file

    US11B.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c346655d32844eda0a9ec3d3d9b16c1c27248bda424fc8b91804d26cd8986454.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections