General

  • Target

    XClient4.exe

  • Size

    70KB

  • MD5

    d1ad3cd22885d548b6c68f33f7c73229

  • SHA1

    eac70e2dc86205170339f6511f9f3597b142dcd4

  • SHA256

    33920d0adcb5d329fc02875d2212ae9d108ca9745918cb0715fb92f34b8f5643

  • SHA512

    e264a3eef494b8e96a7b5198b14d2e0bf53a14f337f569ba40e51e847e9842de5774832753a5249e2232fb3c6b0985eca050309670dd38ece3b38d09e02817ed

  • SSDEEP

    1536:avqKHXXYlb4f6B/2/l9bTz2yXyZi52DvOxcl7h:avqVvxgl9bH2yiZG2TOaD

Score
10/10

Malware Config

Extracted

Family

xworm

C2

county-counted.gl.at.ply.gg:48767

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections