General

  • Target

    XClient.exe

  • Size

    78KB

  • MD5

    f3415ca48d57bbd30321efec49d697e9

  • SHA1

    d11efcafa3486f4f3638bb3bf692da519a42d029

  • SHA256

    1e9808c6b7d500311699f12dc639192f7acb92bcc167628f66ebd98d40554cde

  • SHA512

    6fddbebea9bee9707d658bda9a923a28960993e38e9550e7849b421344a63788d3cffe02344d6afea8fc224cf64a3c178e59b9d77961d3c2554108f43fd788c5

  • SSDEEP

    1536:122X2lrxoD+E+jwFld0ocqvSFazHrGMbWBk6Nu63pEgPOyvEQdFn6lyJrBT:1wxocjO1MFaLrVbWBNppPO6EQDnPx

Score
10/10

Malware Config

Extracted

Family

xworm

C2

phones-prevent.gl.at.ply.gg:44101

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections