Overview

overview

10

Static

static

10

client.exe

windows7-x64

10

client.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    client.exe

  • Size

    77KB

  • MD5

    fb02a2794259bc16503067e6aaaaf99d

  • SHA1

    516b366355bc59e2c8d4a2cf691ada44191d22f0

  • SHA256

    c55ffa5c9712ee1a90fe57480b627a384f91a7206af676dfaf6975f2f99aafdb

  • SHA512

    53ebf87b9cfe62c00110ee1531cda5277542f5ea111d296c289f851160fa7dcc4e87fb2af3f2add87bbfa231638fa64c1ceef89e387d5c0e4f3c0c83a28098c1

  • SSDEEP

    1536:YDGUV3RQZlK4ZQSjXHE7b51wTuy+S68QUP2Oovx0:Yt9tb5SOUeOoJ0

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

exchange-daughters.gl.at.ply.gg:55386

Attributes
  • Install_directory

    %AppData%

  • install_file

    discord.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections