General

  • Target

    XClient.exe

  • Size

    119KB

  • MD5

    b3c0d04cfffe516d09510abcb21b3223

  • SHA1

    90ebf2d1d6d19a4f1a68fb2ec2bbb18d73533d13

  • SHA256

    e25954495b0e5b6a310f2fe7b89e73da2d6f9312de5b0958b0833845405180cf

  • SHA512

    243a52e5963939b8ae84c9343e1435f02b7866247452a984e829530894d36c337002817d2499c0047b0ef69d480439acdfa187f107b3caa411c2b197d90e729f

  • SSDEEP

    1536:IuVWhKK4MF0COIW+HU7bBRhPCOC0qLO1iAkTKX09u:zIdWCOIW+07bbpCl0IO1iAke0w

Score
10/10

Malware Config

Extracted

Family

xworm

C2

around-lite.gl.at.ply.gg:24013

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections