General

  • Target

    94c1b83e9181e597748af34aa30324fa001324bd12d33b12aa01e2a05ba779d6.exe

  • Size

    58KB

  • MD5

    090b76b0c6152ea71f08d1e9ae8f3742

  • SHA1

    ff5ca08e6d69cb68a76422e804b0574d551ed20e

  • SHA256

    94c1b83e9181e597748af34aa30324fa001324bd12d33b12aa01e2a05ba779d6

  • SHA512

    dc10df4bbf0a114524ef74d3fd8b189f2f9cbc46825300c820699cafe2a0d57e94b6a39be607882b5f802f8f94b4f0a46745ce6a1e7c8f0ce7c5fe98c2414871

  • SSDEEP

    1536:sxROmGFPI63TkSO7sXp+bF12x6fk+xOz2xc2/:EYoc+bF1jkuOz2mg

Score
10/10

Malware Config

Extracted

Family

xworm

C2

104.250.180.178:7061

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 94c1b83e9181e597748af34aa30324fa001324bd12d33b12aa01e2a05ba779d6.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections