General

  • Target

    scemm.exe

  • Size

    71KB

  • MD5

    43cd0b33c2655c498032d28d4e438a64

  • SHA1

    e14090b3e307dcca99d235f25ec2fe08209526e0

  • SHA256

    938a97efa11d0246571867beac4d2910c4d9612a6b51952a1103bb10fc9c45e5

  • SHA512

    fce526b9477bf8753bbdf670e6fdc8bf22f8b622b8b72535dca0a9459979efa71a3a10a5e9455fc457a29700b9ab07fcb11aa3fdbb1678e028b88c52b6754a9e

  • SSDEEP

    1536:flrhGHIXlh2eciuX6spQab/tcd6Y6lMOsIJzvsKii:fBkilhrTkZBb/tq6gOsIJUi

Score
10/10

Malware Config

Extracted

Family

xworm

C2

Thecoolboi991-51392.portmap.io:51392

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • scemm.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections