General

  • Target

    XClient.exe

  • Size

    43KB

  • MD5

    db2c6490d034ed3f7025ff37793bed00

  • SHA1

    e9eba86531f02ab4f110fad78058199900f6eb9d

  • SHA256

    86abb3c79b13780fce960ee18ce1cfbec40d7157b5f9ed2ad7fd316003691995

  • SHA512

    d51ea4a0b1f8ee49e2530dc8a1debf2cfe2c3f20675b187c131a591ec6f3eb74eb71efe03f2a0f173f90880462b5f7fb3b00112f39f9a51c0c452e39227ffea7

  • SSDEEP

    768:5t85U1FOQN36QDz8ugdogkbOVbWtn5QeOlhS2tG:fT3T8uQbkbOVbIKeOlIaG

Score
10/10

Malware Config

Extracted

Family

xworm

C2

young-moms.gl.at.ply.gg:42873

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections