General

  • Target

    wadawdawd.exe

  • Size

    60KB

  • MD5

    e164498938ca41b06cccb708e8a4e1bb

  • SHA1

    db8cd85c39723d3318ace7f688808113bd55316f

  • SHA256

    27ca0f20a4c2b6db6c34a998ee5b098eeda821b05716f49eaace301ea2d202ec

  • SHA512

    13c8dfb498d1ac606898c5e7542566f03d93c455eb373ae3ad6eddf04fc6d685f35758f1b8d1b972bf6f97255b2ffc4e29dee9dfc49d893c26ce6582ea829fd4

  • SSDEEP

    768:YLnzE6/av3CSJchI/ohfdETbIIiwVplYHrhI+bUSPYX19gvmiQO7hMjFef5BF:YLw6OeIwhFSbbPD+bTPc9YeO7SjWDF

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/ay20NBKe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • wadawdawd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections