General

  • Target

    4706e340e0c1ad14dbe096f6d6bdc9efa65276c5a288fa1f26b833b18fd42e64N.exe

  • Size

    46KB

  • MD5

    6181c9d0c126fc18603015402e2e49e0

  • SHA1

    1621ebc0836dccfc1c9e5322d4b5f686de82757a

  • SHA256

    4706e340e0c1ad14dbe096f6d6bdc9efa65276c5a288fa1f26b833b18fd42e64

  • SHA512

    1074d6c7d89b60fe42556ab3970a355b28908f1ee1bdc925650ef6f416306b1de4352caf6170a3948b5f8a87f32e719d0d6b033009320fd409f170c032cfd8c4

  • SSDEEP

    768:aBoVSTAPW9jllp0XMtd70hq30gzbGYxIXDZVpNf3SOwht7a1ehV:eHL9jldFwszbGYuTpIOwL0E

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.0

C2

16.ip.gl.ply.gg:41909

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4706e340e0c1ad14dbe096f6d6bdc9efa65276c5a288fa1f26b833b18fd42e64N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections