General
- Target ratexetest67.exe
- Size 30KB
- Sample260905-2mg97sgc62
- SHA256 97543605c6ba00b14d981a8be5b4f219a9cb5e9e54c5f3b16c87187209e0e2db
- MD5 248ebb445bfab581c7d5e4d7fa5ac40b
- SHA1 530bba24439a49d432e5a2ba50ff111a68828e91
- SHA512 6b240b1471625a420ec13c5cd5d376bcb2c4cfafaba08f3c28ea88ee6e9f2182fdc690af235adfcd08466835657a7a3e04e7ac2aa21fc12b16992b889b310f53
- SSDEEP 384:a2458Ytf+1mOEUehuzD2LZX01OfTELgmRuptFlBLTIOZw/W2Zvn9Ikn1stxOqhan:i+1mOE1yG6OLtm0FG9LyOqhab7
- TLSH T14AE23B487BE88327DAFE1FF219B3910102749513D913EF9E4CD595EB6B6BAC046013EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
xworm
C2
-
185.230.163.55:6532
Mutex
-
FpTpcUNqw0erbAoV
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
- Target ratexetest67.exe
- Size 30KB
- SHA256 97543605c6ba00b14d981a8be5b4f219a9cb5e9e54c5f3b16c87187209e0e2db
- MD5 248ebb445bfab581c7d5e4d7fa5ac40b
- SHA1 530bba24439a49d432e5a2ba50ff111a68828e91
- SHA512 6b240b1471625a420ec13c5cd5d376bcb2c4cfafaba08f3c28ea88ee6e9f2182fdc690af235adfcd08466835657a7a3e04e7ac2aa21fc12b16992b889b310f53
- SSDEEP 384:a2458Ytf+1mOEUehuzD2LZX01OfTELgmRuptFlBLTIOZw/W2Zvn9Ikn1stxOqhan:i+1mOE1yG6OLtm0FG9LyOqhab7
- TLSH T14AE23B487BE88327DAFE1FF219B3910102749513D913EF9E4CD595EB6B6BAC046013EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload