General

  • Target

    vapeexec.exe

  • Size

    76KB

  • MD5

    078e632398e8121095dd15be29c13564

  • SHA1

    36885f03f5ef63252c824f828fc872a2da63d6c7

  • SHA256

    da2000c34bb583e900313bffb2a74dc4fc1327b8ee8657f6f4ae63ca9198fe68

  • SHA512

    ba5762a35d13f313e6e40518ccb7f66f7d452ba48d06e5cbdc2e132d213eaf32e71ca1b9a33915ae159ddde5741b4751a66a20dc42677cb12f042af0b883a4a2

  • SSDEEP

    1536:QEL6XGS2J7ckVPHEcg7uKsKDrb7qZ3x2xNmM6/ndrORyWaf:QEJnJ71kcg7uKZb76ndrOUdf

Score
10/10

Malware Config

Extracted

Family

xworm

C2

into-hybrid.gl.at.ply.gg:56462

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • vapeexec.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections