General
- Target ClownfishVoiceChanger.exe
- Size 84KB
- Sample260804-tfm8watgqe
- SHA256 09fd4aa2cec99596250385674ffd48b462c0e9914564af86a5053aaf63327e72
- MD5 566117ef8fcb2119de105b72c79dc5f7
- SHA1 e603c4d1d60a588880595b381eb1ce98b848eb50
- SHA512 276569afd87ab1e3bad5c1f2369a91f5f56929bc537e0c967706f3dea680f6838760e2fb118bc110e7a8a90cb59b25e7bd7980bf0809640cb7182da129d14a05
- SSDEEP 768:9HZrtxekwo1YETDJsbBFR9REiOqhqbDxriBBBBBBBBBBBBBBBBBBBBBRbT8cqBBX:dZr6KsFFR9RlOqcXxrq7JjS
- TLSH T17183C642F3E4C19AD58E3E372AF245A4C274FD199C05964B598CB6DFAAF3B8005812DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
xworm
Version
-
3.0
C2
-
128.234.24.39:1876
Mutex
-
8yXhthFwhDwHCVCU
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
- Target ClownfishVoiceChanger.exe
- Size 84KB
- SHA256 09fd4aa2cec99596250385674ffd48b462c0e9914564af86a5053aaf63327e72
- MD5 566117ef8fcb2119de105b72c79dc5f7
- SHA1 e603c4d1d60a588880595b381eb1ce98b848eb50
- SHA512 276569afd87ab1e3bad5c1f2369a91f5f56929bc537e0c967706f3dea680f6838760e2fb118bc110e7a8a90cb59b25e7bd7980bf0809640cb7182da129d14a05
- SSDEEP 768:9HZrtxekwo1YETDJsbBFR9REiOqhqbDxriBBBBBBBBBBBBBBBBBBBBBRbT8cqBBX:dZr6KsFFR9RlOqcXxrq7JjS
- TLSH T17183C642F3E4C19AD58E3E372AF245A4C274FD199C05964B598CB6DFAAF3B8005812DF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload