Resubmissions

23/07/2024, 16:39

240723-t53pvszakq 10

23/07/2024, 12:25

240723-pllj1sseje 10

General

  • Target

    eeee.exe

  • Size

    56KB

  • MD5

    0eeac71d0fbfcb23fe2d74e77cfe074e

  • SHA1

    4d9254ab5a2d2f2e7e1d87183996e171528af40c

  • SHA256

    ade95ea7502350ed28b57d9ebf4412e9e4530437301b1d34628ff7abcedc72f1

  • SHA512

    bafbf53393005526330990ae40394786aeffe264da0a7862a8c3e325994169d46d3d0b93dba197dc03864874dd8cabae33a798c4534c7edb54c1b9255fc3d0bc

  • SSDEEP

    1536:mgMGS24CfAEcae7d2/yKcpsb9lb6jeNMONzc5J:yMfi3dnpsb9qe2ONY5J

Score
10/10

Malware Config

Extracted

Family

xworm

C2

main-although.gl.at.ply.gg:30970

127.0.0.1:30970

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eeee.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections