General

  • Target

    MasonClient.exe

  • Size

    50KB

  • MD5

    b3764ad5be75af9e28fa4d68a5375481

  • SHA1

    786817e5231040cfa17d943070954d0ece9df7e7

  • SHA256

    e1ad2a54762c18ab7dad710a0518806eb2371e773768d5e68ebe104d17681707

  • SHA512

    e1552b6a85dc3020655a23c705ebce17be2ffa7a2fe1328c535a643bfc9315ad9ce31932edad6d0f1804082afa3164580771b20fd490f770cd11c8a079a52586

  • SSDEEP

    768:WDdIS0QryMZEijZ+3LaXBEp98WBu/h5bX2PfnjLMgt/X6slBs8hJOPI9zuR:2dItQrOit+3mREYbXmbLf/PbOauR

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MasonClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections