General

  • Target

    MasonClient.exe

  • Size

    47KB

  • MD5

    2c8f88e34446781e1a4d201c173d420d

  • SHA1

    c376cdd4aebccf20e85b799e9ceeeebafa77bc83

  • SHA256

    f2f027c21e90d41a12cfeacc16b07216a85eb17d3d4b39fdc51fe3143c8dde46

  • SHA512

    51662ad30d27268435be6fefa779932be47151b64476a1b8a48e74011140e555a377063c5d5ee3eb6a71f4e12979f3f37aef765122c8de9927cb7220fd1da7d7

  • SSDEEP

    768:ln8y5X66Owo6hEfizVik25DTpvghbrivo2g7KPYxJ3AbiOmb00R9S34u3JceujU+:lnD66Owo6hEfizVik2BTpvghbrivFgmI

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MasonClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections