General

  • Target

    x4.exe

  • Size

    976KB

  • MD5

    b9e0bff340f14a2908ae3953f3f11113

  • SHA1

    d0606fd3da43a54dd7d6ce9363827cb91b06539e

  • SHA256

    107085f5d6dbc8376b583badb0f6cffbac55f668f2f7156b66b1a0e66c430d3a

  • SHA512

    fbcf1ad99f6f405d66281fce27763ffd01247c9f515be37063148f21cf4a828ef7e0c8fc584c07a8c85b055f3c341c763001ce6c541b2c967e02d395d41ae0f5

  • SSDEEP

    1536:3NXkKBOaIQipqDTdskbVsxrjVwFDOVqt5dS1EAd8IIq:3NXkCIQCyKkbOrMOVqtDgEA6IIq

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:443

77.83.242.48:443

Attributes
  • Install_directory

    %AppData%

  • install_file

    x4.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • x4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections