General

  • Target

    MasonClient.exe

  • Size

    54KB

  • MD5

    a51b3cb18641d1abd8cc9104e06e09c4

  • SHA1

    2e656f9f2fff61c4e0594a4459fe945c07735bc7

  • SHA256

    b19785992fe57f8f4ab7c7fc7d067a6d3c0832252afc5f13d6e165afefcff90b

  • SHA512

    ae01bc88a59e3b90b0f6d684cbc05b62e57baf3fe68d75d08652e0006adb3d6000939c6e688ce28d4a603afdf1e80b6b1cb3d5e9abaef24938bb8da34a403b76

  • SSDEEP

    768:/IvFRjaxUL8U1Wj0bIKN0l1VzIf823Xocb036rSqyt/X6LGaAhJO0gu3:/I9Rjaxhj8NsfITHHb036Q/pbO0gu3

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MasonClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections