General

  • Target

    24ea45d5fced6bd5f5c19adec337b5dac3a87f3287c8b579709943fb35e6acb9N.exe

  • Size

    52KB

  • MD5

    89cb79815cd9cae330c15c03f3b0e2b0

  • SHA1

    9f911f5416dbbdb6f8ac74bfdecf95cbf806ec57

  • SHA256

    24ea45d5fced6bd5f5c19adec337b5dac3a87f3287c8b579709943fb35e6acb9

  • SHA512

    1fb3c782bab88d69fec6db91f92db7d2059a40ac2dca12995aed6cf72c930fe852b9a083c5f41fcbae953fc2799883af6e61ac6016434e101abb8b48b86c59e0

  • SSDEEP

    768:40xjVvZ1X4izR9nO23AKfhwDnzbH5c8dckIupTGj5sLOIPh5+pxQ1eh/:Xtz1X4saXzbZc8dfTO5OOg6xau

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.0

C2

22.ip.gl.ply.gg:42709

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24ea45d5fced6bd5f5c19adec337b5dac3a87f3287c8b579709943fb35e6acb9N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections