General

  • Target

    fdsfsdfsdfsdfsdf.exe

  • Size

    32KB

  • MD5

    fd1fe2c3fff716da396585745184239a

  • SHA1

    17678114e2f00150fc0396a21a5f56039674442b

  • SHA256

    54401081fdecb5942fa0ea30c2786adfb6d0e7542f4fb92e5f3b05a5cb4a41c6

  • SHA512

    ac1ae714b6d5b099ea7e89fb8b7e8277f41716e37499fee0c11abbdba9aa1f1f67abedabb065338fbee86985ad2599edc9cc986217541f847ba64c940cb8d50d

  • SSDEEP

    384:olRmhGD91SluSWhnHHxzLmY83Tm2eaFO4FzRApkFTBLTsOZwpGd2v99Ikuis6VFZ:8RPD9OQhx/B83Tw49FzVFE9jXOjhFbQ

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

kit-enrollment.gl.at.ply.gg:55332

Mutex

WyKqIy3Q8mXaWB8O

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fdsfsdfsdfsdfsdf.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections