General

  • Target

    XClient_JC.exe

  • Size

    68KB

  • MD5

    9d275a604597b078839550bf339202de

  • SHA1

    9f000b04b0f0be4e6a28a701ee066a47f9bbbc4a

  • SHA256

    091a49814b5565d72ec38059a04a51478ac2caa1ca6159713b27ea163f0c4937

  • SHA512

    ae91288af9415b2cf9ed649cf3d420d536644d70ebaf011dbb021de16d858ec4eaf360aac188219e7340abd1cca3d2d99182ee33d264129f1e5aaade619cb35e

  • SSDEEP

    1536:qhyMIhwWPEW4FIzbnQGAhzYU0Zgd5K8ZbtrMSLsBWOBvO6dmzbD:qh8hwWKFynQj0abVZbtDLsLJO6daD

Score
10/10

Malware Config

Extracted

Family

xworm

C2

tr2.localto.net:41520

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient_JC.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections