General

  • Target

    Xlauncher.exe

  • Size

    154KB

  • MD5

    0b15effe295156438ee5953204b02b82

  • SHA1

    52b20d16720e5eb15850ec3e1f295f408008871e

  • SHA256

    3d1ce831aa6b5a1eb930dc461611566eafb07ba6cc57ca33e798296b38011064

  • SHA512

    583a5d1f5f87b2ee1576af742174b92a7ccd26009654d7ceff3f6481c8ce71895e575dc5b6bfec696d220a6eee0d585a7349157da3f067bed1980310c7ee02dc

  • SSDEEP

    3072:QT5a9TaxVFd9JzOpZi4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvt:sZd9jgVqwlL

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

19.ip.gl.ply.gg:44815

Mutex

LAvqFuzRK3UtS246

Attributes
  • Install_directory

    %AppData%

  • install_file

    K2M2DNQ.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xlauncher.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections