General

  • Target

    XClient.exe

  • Size

    72KB

  • MD5

    4ba0869c902a41bac0b4267b36cb2eac

  • SHA1

    9227fea6b3731b4d9df4b69f748b9be927c101f7

  • SHA256

    9289a7652ae499bf78e78577ba8fa7bcb91b264e756b934d292ac7249ec75652

  • SHA512

    214c42a1c05b3bd147d3fd630235b35e7bc04166d421a4436d6939a425f017d74a7bc461bfba0d190f5b7ec6022f8fc06de395a29f92d5f91613c705ea6b0b57

  • SSDEEP

    1536:1UKg4C+jsUQBnoC0Pabd1WodbCjh7hOXBPFv8SOtgoFW7wTu:1F1C+QUQ+itbCjCRNOt5F5u

Score
10/10

Malware Config

Extracted

Family

xworm

C2

ways-examining.at.ply.gg:8080

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections