General

  • Target

    Client.exe

  • Size

    64KB

  • MD5

    54c496bacbdf6fc399b7da0085a1039c

  • SHA1

    5dd7f980f255fc7d895a5dbe52cc8ff22e5aacb8

  • SHA256

    b9f1c55d7bc02ca6a65e2070db367e34f462ad242acc7d72ee30c7adbad613e6

  • SHA512

    1a329e6b0cbe14749dc9480d69520186185b4788bc5b12ab4454a29d640973d54aa2706616a282e096f62fa965decfb89a852eaacb24919c892b1b0195964488

  • SSDEEP

    1536:CtZOKUA5ipUF5mbLCsiF3KC+g6GO6MQo9m:CZZip/bLs9On/m

Score
10/10

Malware Config

Extracted

Family

xworm

C2

sent-down.gl.at.ply.gg:2905

Attributes
  • Install_directory

    %AppData%

  • install_file

    sys.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections