General

  • Target

    XClient.exe

  • Size

    30KB

  • MD5

    ad8edcc9d104dbdfef5c3eb3fd4883bb

  • SHA1

    f7efbd13e17bc109751e23433857ac58946133a3

  • SHA256

    ba69874aeb4cc130d22a6a63f5e46d79f7729bd40d898cf7a4d4e25986574e6d

  • SHA512

    e2f400425cf85bc22097c68663d3d70d9b96fe36d3e7ed19b844477bdea0271c7930b02318653d7d5c1d6693d7e69593366af690cd67ad4d31606acc1f33e030

  • SSDEEP

    384:G7wTA+5OfhxeelKn4MPLZhspJCXlYECwaiwQsbRugtFuBLTIOZw/WVwvn9IkVuVK:oFx7s4EQw1YETDJsbBFR9RwYbOqh6bo

Score
10/10

Malware Config

Extracted

Family

xworm

C2

score-told.craft.ply.gg:54077

Mutex

zl2Ez3CU5qsErCML

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections