General

  • Target

    ty5ergeythty.exe

  • Size

    60KB

  • MD5

    47b011c7779b62aa99c722aca7767341

  • SHA1

    0d73a77c8c060637a6d3ab02b2c026867b9bf283

  • SHA256

    45857660742acd40f0069605e1690ad20c0d4e3ab39b96533be5eb09f6175239

  • SHA512

    60a39f4bfdc826466eb784d4b79d26178fd4faf50ca2d4d70a4c0793a49a044e7bee6cd74fd718ff475573b1cf62bdba5bfed7018e9cc9c56515da81e3507702

  • SSDEEP

    1536:ZOl1f+MGqv3+qkYGkbn6qGk+4F6+qgBS7OlViJ:ZY++vzklkbn6ucgE7OlViJ

Score
10/10

Malware Config

Extracted

Family

xworm

C2

co-rank.gl.at.ply.gg:43092

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ty5ergeythty.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections