General

  • Target

    XClient.exe

  • Size

    194KB

  • MD5

    73720f6636143d16b59a087ca45ccc42

  • SHA1

    b68e718599a415997c1871ec8172add8d741d2c8

  • SHA256

    e67acca559cae46d9bd735ee348a8f774ef58ad598773beaa0526b382e3370b5

  • SHA512

    653b47ff061a87d9f3d378cb5ae65d919fd22c5744163a435dbe0de057cac5734dac9b76a1ebd32da40e2d88c6b64526d67759d0625448387eb4cad7324760a2

  • SSDEEP

    3072:EBv+3mQsHIkp4QFg1bSAVzOq+2fRUGKXs+S++7KFSbxeY+qDDrM5:m23mQstpybxVLOGqStKEbxI

Score
10/10

Malware Config

Extracted

Family

xworm

Version

3.1

C2

girl-tries.gl.at.ply.gg:7131

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections