General
-
Target
XClient.exe
-
Size
56KB
-
Sample
240530-l6tvcaeg94
-
MD5
f16dcfd4c06f32ee1d43645388c2dfbc
-
SHA1
5159f63248ec76d69e0f194fce23ff8e97f53f0b
-
SHA256
b9fa69d0fbbdb92d1b2931cd36f6eccd86ae6b04b9349ec589e16a0cc34912ba
-
SHA512
16594523a655315460804d97dac2aaee888ce6f2c6003c12bad5013bc73a5975773e68097046cfe7a0e9ce0c862b99a520fb071e45bf6e944fc07ad6d30e9841
-
SSDEEP
1536:w9EnN/5m8Ob13SOl/i7t7RN8LkbvlsOsMgXOzDwJ+:VN/5S35l/i7t4kbvlbgXOzB
Malware Config
Extracted
xworm
127.0.0.1:4099
-
Install_directory
%AppData%
-
install_file
XClient.exe
Targets
-
-
Target
XClient.exe
-
Size
56KB
-
MD5
f16dcfd4c06f32ee1d43645388c2dfbc
-
SHA1
5159f63248ec76d69e0f194fce23ff8e97f53f0b
-
SHA256
b9fa69d0fbbdb92d1b2931cd36f6eccd86ae6b04b9349ec589e16a0cc34912ba
-
SHA512
16594523a655315460804d97dac2aaee888ce6f2c6003c12bad5013bc73a5975773e68097046cfe7a0e9ce0c862b99a520fb071e45bf6e944fc07ad6d30e9841
-
SSDEEP
1536:w9EnN/5m8Ob13SOl/i7t7RN8LkbvlsOsMgXOzDwJ+:VN/5S35l/i7t4kbvlbgXOzB
-
Detect Xworm Payload
-
Drops startup file
-