General

  • Target

    Xlinetbam.exe

  • Size

    81KB

  • MD5

    242fb8908c5fd2b8fbc9cad206ae59e5

  • SHA1

    3475aed1bbbb350af45ce0b4b28ab83ebb7b5ac6

  • SHA256

    70fb611f6d2ac9802d170bbef7566caae31461df8d69921fa227db546f235e86

  • SHA512

    726e4626eefc35dda7cb0a0bdcdf9b5f7f278de25a1f630bc0916b17b1b36457b578180b0d406151e558c6d6329242aa9108c15f4674f782d2e3e56c027f82da

  • SSDEEP

    1536:+cB4WcqHCtWc7ayn4pRoFdLG6r1dUbF+Q27LKvxx9givh6RimyOF4Li7cjxJb5:7eqHCt7auOiZpObFZ2WPo8OF4mgjxp5

Score
10/10

Malware Config

Extracted

Family

xworm

C2

we-should.gl.at.ply.gg:16684

Attributes
  • Install_directory

    %AppData%

  • install_file

    system32.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xlinetbam.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections