General

  • Target

    XClient.exe

  • Size

    53KB

  • MD5

    839595fb6adab9c84e75c39b21a88e65

  • SHA1

    f4e365585d57a81d3658f6fb46d26cb2ab6392b0

  • SHA256

    81c961f3f0df23da300b51eea51fa50be813ccd0909475b16b6077c418952528

  • SHA512

    72fb1b9e65ef0fc52dfcb98dace18400045067e755a67ba14b39ff9622a179783e1b194416330074e32fd09bbb581c2c9d33a48cc0b2fc5b28650c37033db757

  • SSDEEP

    1536:2Zlby4iMZePuaFqCwEs1zbg0J7FvqOu1A:2lBieemaxwEs1zbg7Ouq

Score
10/10

Malware Config

Extracted

Family

xworm

C2

machine-cheap.at.ply.gg:39143

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections