General

  • Target

    38b88caf1dd809c6d77d8addce355a3e35dccab52f15ed67491437a49bace226.exe

  • Size

    36KB

  • MD5

    70eaf49a98e12f4d4de3c019c0baad11

  • SHA1

    b48fa964e0c99e49ff2e9d4d74e2ead1457d9dcf

  • SHA256

    38b88caf1dd809c6d77d8addce355a3e35dccab52f15ed67491437a49bace226

  • SHA512

    2bafea3ab77685af33ee7b24ad4b84e6dfec5ea454815b9ccee522246a964ddaec4538d58f1d17090b80daf4a14a7476b35d2215bdaca49ddf8cc873e6ce3377

  • SSDEEP

    768:vL13A5Uno9RfHWa2B71eo8icHyEWbFb9YyOMhSQXv8M:jxA5Uno9JHWXZeNicHyESFb9YyOM468M

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

85.31.47.24:1888

Mutex

ElNqLr9sSzibVsM9

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38b88caf1dd809c6d77d8addce355a3e35dccab52f15ed67491437a49bace226.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections