General

  • Target

    X32123123Client.exe

  • Size

    72KB

  • MD5

    19f96338aab8db6b162abeabcd495067

  • SHA1

    1a240a4ce23e225171346c514f9fbb5d194549f6

  • SHA256

    57ea92d4bdea719c06cba145074b1a60e3689305c70fd8b4bcac88e0e94be932

  • SHA512

    45ef11c9d6c59854ec7efc05b600ff38e1d05f58dd9564a8514b4c893e92ab78d93ebff693b17fc3bfdb64c7722f343937565f53d69780e099ef99e52e782708

  • SSDEEP

    1536:Ci0dnOo4TKpJThgqI+bQVxZlT1/OJpKogBLQ:qp4wiH+bGJT1/OJpOm

Score
10/10

Malware Config

Extracted

Family

xworm

C2

story-pl.gl.at.ply.gg:13978

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    MicrosoftAudioDriver.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • X32123123Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections