General
-
Target
4cb3d51171be57a01af1c26473fbfacdc99feb360f986b9c8fba06edfb340029
-
Size
65KB
-
MD5
a23f687e5cfe46f6ca3093f26507f993
-
SHA1
a7ff34ea4db9860e5ba0f8e4c973e73d132839e3
-
SHA256
4cb3d51171be57a01af1c26473fbfacdc99feb360f986b9c8fba06edfb340029
-
SHA512
f31482c4a9cf77a4e26477d28349f1eaca98a5f692664c20f4711621e8763e24c7c75395f750bfbbb193b810e3f9dba7e49f5cb2d5ac6a103511799930d5a53e
-
SSDEEP
1536:sL+fN2pEdBHmREbg+2Gy7b01V28UCYvc6r4/56O7k5Qn59w:QY+EbVkb01pdYmEO7ke5i
Score
10/10
Malware Config
Extracted
Family
xworm
C2
127.0.0.1:8848
Attributes
-
Install_directory
%AppData%
-
install_file
XClient.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4cb3d51171be57a01af1c26473fbfacdc99feb360f986b9c8fba06edfb340029
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections