General

  • Target

    XClient.exe

  • Size

    77KB

  • MD5

    40eadc95e84e96f8637d45426a807c7d

  • SHA1

    d00dfdf2f0dab9c40cf8db82ae19f19741dd5b32

  • SHA256

    e603876a013edd510bf68e9446d50adb2520a4fbf92658cfa32194b095abd5f7

  • SHA512

    d61e22bf61fc002af4cea83e9faa716088d259722032bbdec6c908aec8ca8180ba92f2eeaa4d22d4c7f63e605e873eb73cbf91cd66928ca8066719e9ebb22769

  • SSDEEP

    1536:SyADB0sfPHuJEq/SxWXdsy+CkNaEboTniMpKaP8K5OLne97pry+2cU:SFBHdwhC4EbAn1zx5OLc9ry+Q

Score
10/10

Malware Config

Extracted

Family

xworm

C2

hit-turner.gl.at.ply.gg:43344

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections