General

  • Target

    a3f2c1a4136cbf9ecc2b16f266c349796296b7300dc3f5d6f4d50fafe22cf8eeN.exe

  • Size

    61KB

  • MD5

    3fe50cfec20210addc80f500e129def0

  • SHA1

    722be146a7dc2801770f2865ecafee9c70192543

  • SHA256

    a3f2c1a4136cbf9ecc2b16f266c349796296b7300dc3f5d6f4d50fafe22cf8ee

  • SHA512

    1856f153875397e873a84b9b0709c9ec332ff11094584c0b0ccc2616a0990975f3fe104a0cb3bdd6b9e60908e15d1205aa421dffd75a2e98eefc0f53f9a2d78a

  • SSDEEP

    1536:PC1KA2hcrFua7uYHM5zZW52+ZbDoqjf3Npr83jXO8h1oO:PC1KA2hcT7umMhZk2+ZbDFrv8zXO8hV

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/H3wFXmEi

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a3f2c1a4136cbf9ecc2b16f266c349796296b7300dc3f5d6f4d50fafe22cf8eeN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections