General

  • Target

    XClient.exe

  • Size

    76KB

  • MD5

    7d8ad55a9d808294cd8e2852d3c6dbb2

  • SHA1

    80678790ebd429a993e97475de819d36d3dbd3b8

  • SHA256

    d3ac6a0f669e80d2cb0f70bd6be02c9640868bab7fcbcef8a19b6dda14341011

  • SHA512

    5e2aea4629c52476d6588f63459a9b5249a0bc8abc06270d2e2435aa179f3423a7c727fd3474d1b3140fe670eac06d422e486e2e7d5ef78f1e306f37228c6852

  • SSDEEP

    1536:H+st/aN8IZOxW5rnUnugxR8d8R54bOAOSxji9ibDS+O73r/H:est/pc5nPgxR86R54bOABxG9ib++O73T

Score
10/10

Malware Config

Extracted

Family

xworm

C2

fe80::33bf:f5c1:a588:ed6a%19:12999

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections