General

  • Target

    SteamUnlocked.exe

  • Size

    317KB

  • MD5

    727a81db53738e0640283d814218eeb7

  • SHA1

    028e7812069c227bd00bac402b986aec3d24b98f

  • SHA256

    c36a8ea18e6c23acd35c98ad85c2ffa71182fad318bc6e5e5bc51df42f7627ae

  • SHA512

    0b0f2e2c0fb88c6dcb0ab2212dbed6b4dc54894f0834463a40e3f18bdaaf534c3bec2f30c348f0296e0198648ec5029a880f176e1618e086b948c43e3d6d959d

  • SSDEEP

    6144:Bd1aFbp+GIIIIIIIhIIIIIIIIIIIIIIIU:D1aU

Score
10/10

Malware Config

Extracted

Family

xworm

C2

s-adam.gl.at.ply.gg:43868:43868

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SteamUnlocked.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections