General

  • Target

    XClient.exe

  • Size

    58KB

  • MD5

    5f592bf19b6a2d932d5f41d4c814ad72

  • SHA1

    eac47fb107cb69f63a5ad403c8cf88886307095c

  • SHA256

    8df0f09e85201e02435652e3e77e5f4574732a977ac16d97a918d0f153ca3911

  • SHA512

    6c66943cc3560ecc02446d7bad0819406c1f4f5b9f703f892c9b5f48a06ab7674dadd99711ba6328af82e220a841d9fbceb9ab6244f216dbb6af989b9aa11212

  • SSDEEP

    1536:4/CaSt6xPMaxeflTdSkb376y3VcWxGDyFOVW1p:4qV6xPMCqxSkb3WylT8DyFOVWv

Score
10/10

Malware Config

Extracted

Family

xworm

C2

reports-audit.gl.at.ply.gg:17158

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections