General

  • Target

    XClient.exe

  • Size

    83KB

  • MD5

    533521d36a64c57dec09ba4a75625d10

  • SHA1

    7b2b2ac78617c4380dff36a52d2ae704848c2961

  • SHA256

    de5c9e31164208ecead5f6e42a1baf7f41b7ea2d9f8b294c792c45fc3662c876

  • SHA512

    96bb1e6e27460618bd58ad86dd64708efe8501f7ca8af016930494fe1eeec59d79cbdb3cda0e995ddc2b9cd7092022571a7afe97221664b6241b046035f8ff6d

  • SSDEEP

    1536:OpDa4LVs98vyoIbxvDOuQqyv73cdVbW30tQvIp2iX0COSgo0bh:kDvnIFvOubWkyY9OSmh

Score
10/10

Malware Config

Extracted

Family

xworm

C2

con22.duckdns.org:58554

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections