General
-
Target
cd957aab73baa2b3aa0fd281f7d58a94.exe
-
Size
61KB
-
Sample
240521-pexcyadc96
-
MD5
cd957aab73baa2b3aa0fd281f7d58a94
-
SHA1
14970a8f02e6a4094c12eaca2a6e051a714335cf
-
SHA256
3bc839c36e16d08250bc4403d581ab822e5bb251be4c75097ffed5e29d5fe1cb
-
SHA512
861872ac6e2305d39efed9e2683595ccd11d6a977988def777a1c62c74ebe2e858ba90fed2f19cccf49379f1331dda9077a21f84d90ff700fe882243978ba5c3
-
SSDEEP
1536:ZyE+lRntKWfjXlUQkbyk1WwTS9O4aWGdaB:ZARtKW7XllkbyBwsO4SC
Behavioral task
behavioral1
Sample
cd957aab73baa2b3aa0fd281f7d58a94.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cd957aab73baa2b3aa0fd281f7d58a94.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
xworm
169.254.90.187:7000
143.198.155.177:7000
-
Install_directory
%Temp%
-
install_file
XClient.exe
Targets
-
-
Target
cd957aab73baa2b3aa0fd281f7d58a94.exe
-
Size
61KB
-
MD5
cd957aab73baa2b3aa0fd281f7d58a94
-
SHA1
14970a8f02e6a4094c12eaca2a6e051a714335cf
-
SHA256
3bc839c36e16d08250bc4403d581ab822e5bb251be4c75097ffed5e29d5fe1cb
-
SHA512
861872ac6e2305d39efed9e2683595ccd11d6a977988def777a1c62c74ebe2e858ba90fed2f19cccf49379f1331dda9077a21f84d90ff700fe882243978ba5c3
-
SSDEEP
1536:ZyE+lRntKWfjXlUQkbyk1WwTS9O4aWGdaB:ZARtKW7XllkbyBwsO4SC
Score10/10-
Detect Xworm Payload
-
Adds Run key to start application
-