General

  • Target

    x.exe

  • Size

    63KB

  • MD5

    78e0d6b85721aec5404971862734be82

  • SHA1

    b0f490a2d377670c62c294b9bb163cacf80c256c

  • SHA256

    6906f0586af2064fb11cd0e81fc09e6f87fa4e77580b43e79ead6242d6cc7469

  • SHA512

    e03ae3b43aee97ee21053c1174195b19388cc1fe403813afe63aa0da4c9418b47a0e2eb846082d5180264820572028085ded744bdd28e1e1cf9e090838020666

  • SSDEEP

    1536:+Ed0d4ayDZpxSAb+hXSBni3dWY6AxtNOu65x+/kuC:+Bd4aYbAAba9WOPOr5iC

Score
10/10

Malware Config

Extracted

Family

xworm

C2

18.ip.gl.ply.gg:33725

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections