General

  • Target

    xx1.exe

  • Size

    64KB

  • MD5

    ea584fcd62f8d5f8060f4bc0a8f362a5

  • SHA1

    2361147b6d5f7f56d68618d45b90b8ed1631461d

  • SHA256

    80799734e6e53d9da6b5578ad7712f7f8356a43f60a11c0329aa6d7f51eca6da

  • SHA512

    6ec64ef0c451eaba25a922fc35d7ecac153e131a1151716a79b18eb8ca993203c1a8f3ba1bee5196b9e6dc641a9de4544ba318c4ee58fb40e201d0aaffc26542

  • SSDEEP

    1536:AojDhGhNnIvbQ+bRtDtNFg69/fOm7ERJ:AXIc+bRtZb3OmMJ

Score
10/10

Malware Config

Extracted

Family

xworm

C2

reply-accidents.gl.at.ply.gg:31474

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    1XClie1nt.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xx1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections