General

  • Target

    NET.exe

  • Size

    69KB

  • MD5

    22e0deec26b7404904a63bd6467fdc92

  • SHA1

    445329dc769fe93f996bcf29b8dfc4cbeef987c7

  • SHA256

    e0d3fb9284b99a6cdc02531b62f40f885cdbbc58ab04dfb0985b3d2ab67ce191

  • SHA512

    df4967ec0862064d0547588f8b08dd7fa94b7783dfcf6264441a843f46ba2925a5e190ad6b7364b09897310356892e04af48a0807bee41ca63ef4b8d8165a8b2

  • SSDEEP

    1536:WarssZL2DPCtTOIdUfDn9DNoS+b7vqBR3RWGoZVSOuWsU:TyxDnp/+b7vMXIVSOuS

Score
10/10

Malware Config

Extracted

Family

xworm

C2

87.121.105.227:7000

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NET.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections