General

  • Target

    main.exe

  • Size

    69KB

  • MD5

    4822ba6a636e6004d529acd1c343d918

  • SHA1

    6d3be23dbaf66ea561f4455bd7323cf9cd4c293d

  • SHA256

    5506ccbd33408f09b67ca5f800e20acbe0bb895f42ef3234fe07b2ccff8d06ff

  • SHA512

    9e018aa44dfc8f4a568e38530dc5b9893462afd9e0cfeb1fc40ff3ac512ed25ec86c50e59fe4d76d781e04195d7df36255a9e4dbc59cfdc940c4939985a173ee

  • SSDEEP

    1536:s9RN41yg3LTU2a0AvR5bbT28ogW66QnBYOo+OyfX:4RN09LAvfbbC8olZpkOyfX

Score
10/10

Malware Config

Extracted

Family

xworm

C2

173.31.160.10:4040

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • main.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections