Overview

overview

10

Static

static

10

Condo Gen/...or.exe

windows7-x64

10

Condo Gen/...or.exe

windows10-2004-x64

10

Condo Gen/main.dll

windows7-x64

1

Condo Gen/main.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f0b0e100ab96c9d7638867f710337fbf4b7822bcb82ef23fc9c36d1d2a5e2732.zip

  • Size

    424KB

  • MD5

    72495ccb8c55661af72002d2ad52eca8

  • SHA1

    d28863965e2296846586939037437f0847d01448

  • SHA256

    f0b0e100ab96c9d7638867f710337fbf4b7822bcb82ef23fc9c36d1d2a5e2732

  • SHA512

    2428ff5650a752646bc2775e4e3cdaecb73e88c11557ea990715a31ed07dcd0e207ad897fc8e9961ff91a5579aeb9eb0c3dcd082bf715ecc51bc7c4f977fae81

  • SSDEEP

    12288:6vTgH7j3ut+jOAO8XH3j6mGRW1+NlkStyz4Cn1K0XZ:6Y334b030NlDyz4E11J

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

79.133.57.98:7323

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • f0b0e100ab96c9d7638867f710337fbf4b7822bcb82ef23fc9c36d1d2a5e2732.zip
    .zip
  • Condo Gen/Condo Generator.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Condo Gen/main.dll
    .dll windows:6 windows x86 arch:x86

    c61169658a92423f3598b3d3c5e94950


    Headers

    Imports

    Exports

    Sections