General

  • Target

    NIGGGER.exe

  • Size

    38KB

  • MD5

    894c8af81019b155afbc783fe3542afb

  • SHA1

    cf267ae82c31de99f62984dc2ec34fe0a0b319fa

  • SHA256

    92c041e2edd75efa5104ee6ed9848725605fd3b95c0f0412ddc2342f3348fe96

  • SHA512

    d54c642f8c8c0a3d00ca9c5ff073719dfd92f232d8d584433c1022b592dcbc8287b0955af0bc1f5b7abdca10616fd493718aba193ba39634fdf704d01ef96cef

  • SSDEEP

    768:uIQzVrdKOR2Esi6BluhU3sFWP79xNaZOMhrQX:uIMVrdDEhiySF69xNUOMx6

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

PtTWvO7nJoDfozK9

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

  • pastebin_url

    https://pastebin.com/raw/Xei4S8Yz

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NIGGGER.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections