General
- Target vdscvvb.exe
- Size 30KB
- Sample260904-24jvcsaf47
- SHA256 9b76a32798f57059284f24e540f6e8d70f661a27b2d5d921d26c7983e25832cb
- MD5 17788fe86c0d3ce63ec2e8818a15b00e
- SHA1 1f78743fc8a5e2d5f455516d1d34ea5ade63f634
- SHA512 d6e428b444f43ed7ee36ae86dbffee01b1060fb7250b3b2bd1d485cb0c899aa78ddaf24ec91aaca98c1a8ce1008edea5fa349429216b582e8cee59bd927c9065
- SSDEEP 384:n7wTA+5OfhxeelKn4MPLZhspJCXlYECwaiUXQsbRugtFuBLTIOZw/WVwvn9IkVu3:fFx7s4EQw1YETDUAsbBFR9RWOqh6b0
- TLSH T113D24B087BE58327DAEF2FF229B291010275D507D923DF5E5CD896A76F67A8047003EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
xworm
Version
-
3.0
C2
-
vdbvdnfdm-39285.portmap.host:9999
Mutex
-
88PKFYXy13b3DeC8
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
- Target vdscvvb.exe
- Size 30KB
- SHA256 9b76a32798f57059284f24e540f6e8d70f661a27b2d5d921d26c7983e25832cb
- MD5 17788fe86c0d3ce63ec2e8818a15b00e
- SHA1 1f78743fc8a5e2d5f455516d1d34ea5ade63f634
- SHA512 d6e428b444f43ed7ee36ae86dbffee01b1060fb7250b3b2bd1d485cb0c899aa78ddaf24ec91aaca98c1a8ce1008edea5fa349429216b582e8cee59bd927c9065
- SSDEEP 384:n7wTA+5OfhxeelKn4MPLZhspJCXlYECwaiUXQsbRugtFuBLTIOZw/WVwvn9IkVu3:fFx7s4EQw1YETDUAsbBFR9RWOqh6b0
- TLSH T113D24B087BE58327DAEF2FF229B291010275D507D923DF5E5CD896A76F67A8047003EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload