General

  • Target

    XClient.exe

  • Size

    62KB

  • MD5

    1d59111b68675615a957d4ff03eefedc

  • SHA1

    13a93087366b1d8357aae521c1c5d3401cba330c

  • SHA256

    b15bd78ffc6b2fcce90b70de915f8e5dbb3df43cba82ba8503382f03be927c05

  • SHA512

    12896296be9aecc0d6435af0f2a35106cffd4050288da130a379fbb0a36fe96f60e0d48000d1c287e16d8dcea923734b4af028f46a0490bb51dc2bf0d61ef4d9

  • SSDEEP

    1536:6MKe2XfNa0WfHGlrf+bnj/fEHrAw767OddzA:6MKe2X9AGh+bnrhtOdds

Score
10/10

Malware Config

Extracted

Family

xworm

C2

getting-jane.gl.at.ply.gg:44151

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections