General

  • Target

    XClient.exe

  • Size

    36KB

  • MD5

    4302f7cb54e2b051cfc554fb572923c8

  • SHA1

    b7f22b889c7b02a3b43287a7a966f8c418c4b71a

  • SHA256

    7e1c48f142281469f85123ef14404a610ce2f565fe2389f4adc938c5d28ac076

  • SHA512

    81933f9d20e6dc4106593e78975917bea97874277f8312bf50bac0ec7d8613eb2cb0bc2528050c3803ee820da91b827c259264516d1f82d099bba955c3acd1b3

  • SSDEEP

    768:M+jiMDvJRA5g+xCwdW9OXpVFr9oh2OwhUurZsE:hiMDB0g+8wgsXFr9oAOw+vE

Score
10/10

Malware Config

Extracted

Family

xworm

C2

considered-stars.at.ply.gg:8888

Mutex

Kmoii3EPES5fg9hn

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections