General

  • Target

    09dd4d733e9baeac5046a72138d6bad881285ce3145c8e185771c7936428a915

  • Size

    32KB

  • MD5

    0d94c20fcc26012e1eabacb643e71a8d

  • SHA1

    3a3828c78c4482fa0bc1f2fe502712a2ca8af340

  • SHA256

    09dd4d733e9baeac5046a72138d6bad881285ce3145c8e185771c7936428a915

  • SHA512

    95791f16701fee5a207bc5c8ec94987332d9ff63bfd71d8f5af42eeb74c2e7dfe67f8ed1b8e6265c25e0bd5979d88c9337eccbc0702faaab22423d8f18aff539

  • SSDEEP

    768:lqJluIYWuThrt23/nJcF+9HjO/hm/3+M:IJ8ZW4rt2PnGF+9HjO/YWM

Score
10/10

Malware Config

Extracted

Family

xworm

C2

reference-roll.gl.at.ply.gg:65104

Mutex

0dr7M5Cde3nWdlRw

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 09dd4d733e9baeac5046a72138d6bad881285ce3145c8e185771c7936428a915
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections