Overview

overview

10

Static

static

10

xthingy.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    xthingy.exe

  • Size

    98KB

  • MD5

    292179f4a1d3d97ef682df917ab28fa5

  • SHA1

    d966e4ae7cda2c53f283ee1f097243bded6fabc3

  • SHA256

    48db21982e3b50f4690818e958b0d831c3098df6a229b88bd09776087de6a56c

  • SHA512

    5d6f2253232f509134573758c6f7dd401e0361cf6270810704e513bdfa8ef21113dc7dce3506600e549e35bd3b8505f31e536a9d69c48f308c3cb449d7fc4b89

  • SSDEEP

    3072:PdFrB+e9+wAf/mNbkn5VO1ia/ZOGLdmgEA6IIF:PnFtPK/sbknrMdIA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

88.202.231.139:4444

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xthingy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections