General

  • Target

    Condo Generator.zip

  • Size

    424KB

  • MD5

    8313c6a9f0c179d50caf7fbf80282722

  • SHA1

    6dd980e8a718e76990dd7958a6dd58a7b192f166

  • SHA256

    806ad25ba5937494ffa49be3760a7c1a44caf6e959176e983a23747910b5cbbe

  • SHA512

    02e92f89b5e46052479a9b9c5c3ab5b2db4f58348ea9a4340448756acfc62d570eaaa8c6181520d961d44716bbb0ad9b26cda6c2705d488fb1e8fd93d4f4d329

  • SSDEEP

    12288:ZQv9pgxoLfFQq1Vvarhsji7arJNAIJ0QiGFxUv7B:6vrhfiq/irKjimrJNAU0QZboB

Score
10/10

Malware Config

Extracted

Family

xworm

C2

79.133.57.98:7323

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Condo Generator.zip
    .zip
  • Condo Generator.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • main.dll
    .dll windows:6 windows x86 arch:x86

    c61169658a92423f3598b3d3c5e94950


    Headers

    Imports

    Exports

    Sections