Overview

overview

10

Static

static

10

Clintes.exe

windows7-x64

10

Clintes.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Clintes.exe

  • Size

    65KB

  • MD5

    e69272f11602f5515c0f3bcc48aefb91

  • SHA1

    8c8bece40ebb0b741a3e518c4f29eec0f7d739bc

  • SHA256

    b71e0e099a2a6427771cca617061a8c4b00b1fb21cd25905236257e478f43971

  • SHA512

    4839598d57c544aa0fc9c6ef59187ba5ba8cb74e30715c2649af37eb521e8ea2354176da4c1a839f1bf17b486b7eedf78ff341c8a2db2e31483d94e0d5fbf16c

  • SSDEEP

    1536:bPdpQxYRMLzHjzk/Pl1IR6bNN7MLanr6eOOMoi:rdpQCYLv87bNzrOOni

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

character-acquisitions.gl.at.ply.gg:36301

127.0.0.1:36301
Attributes
  • Install_directory

    %Userprofile%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Clintes.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections