Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    35KB

  • MD5

    cf2c0a2174ad2645b1073c3359f94063

  • SHA1

    b92deb54bc575f89d6b58370bfd248a3cad057b5

  • SHA256

    3644d1e5ee81bac5ad05862398068c2163fde515709c0dc7134c6fc3b3e1a39f

  • SHA512

    dd70f9f8bf7f583f348a57a056d53904494a375cec0acbd185635eb83fc4fb7bb2c61e4be9e5134f944929b93669816f8afa9d95c421b9bd422f86c8f7d0b1c1

  • SSDEEP

    768:/+Nr9Pjl7g9xxhI6Fk9lR6KO/hc/PF/xQx:/+N5Pjlc9pFk9lR6KO/Kl/Cx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

CzmekDOo5VsFeqxD

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/BSSw6HT3

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections