General

  • Target

    goodgame.exe

  • Size

    71KB

  • MD5

    c905744bf93f0fde5231b6b8f5535b6b

  • SHA1

    9be360351c7930f2995bcbd18d0d9c97255e8ab1

  • SHA256

    5387c56df35aef193a5bb272b88d0ad4e05b35a71a72f6c4190e548243223c87

  • SHA512

    3e98b893eed81d6a2acfe53318f195c01379241807bb97ccd56ff9537eea5e897df728d6ef44f8335942d17096527e9ae2dfa21a805293e60cb35a29a3d61f46

  • SSDEEP

    1536:cD6Glaj8EJ/kFdM2gcXe80n+bWl8b8ig4Vh6XIruOCCrX9XQ1Z:cpEJcfM2g+L0n+bWBMuOC4tgL

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

  • pastebin_url

    https://pastebin.com/raw/CKj30Ny4

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • goodgame.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections