Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Resubmissions

28/05/2023, 00:00

230528-aadbyaea4y 10

27/05/2023, 23:54

230527-3x5nxsea4t 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    l4n38i.zip

  • Size

    42KB

  • MD5

    a1f28bad18b8cf2b71a484683e687f1d

  • SHA1

    a0d43218864d225d98c64db2643c343e566902ba

  • SHA256

    a9d2942dec71a9d77d924ab05d997c1c5d914a0cf4b7399a01214ace12d4b9ed

  • SHA512

    5ad639369c3581c9d53ddd5e5c047c30de97c3d83ed66dc18fac5b493eb1e1e25a9a43c3cd891d78bc8bdfbeea7918fd89f6897f0250ef9ba6052946324dd653

  • SSDEEP

    768:ZLXXvfYZsgP/oNfwclPFdcpbOj5g4nkDP4Xz5d9ra82ou8NCtX:FXwsgQNfwGPbcpbI5tnkDP+xJixtX

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

2.tcp.eu.ngrok.io:18531

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • l4n38i.zip
    .zip
  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections