General
-
Target
XClient.rar
-
Size
47KB
-
MD5
3e927f3cf005e86563edd2f8b9a010a7
-
SHA1
d3298614438c234c90cf4d979ea166211dd32e6f
-
SHA256
baa8ace81d5e51f20fea99bf6b8de26c594a2011b670883304e085e5a9847eb2
-
SHA512
a12f9f63aeefd7b46a28bba0d9266ae57ea8e1a1a1dd24ed00125d3d31d6c8e93fc448c183d5bc7c49b617e577c611bfa38ee7527f2584bfe5d4273b3e056558
-
SSDEEP
768:KJqOIafzF7rapluoLB4bkKxOxUR+ezEuauHG+YUqYm074Idsvv7L/jBhl+6NDNz8:XLaR7WbuoLQk1evrmIzm0EICvvRBbz8
Score
10/10
Malware Config
Extracted
Family
xworm
C2
full-self.gl.at.ply.gg:45212
Attributes
-
Install_directory
%AppData%
-
install_file
XClient.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
XClient.rar
Password: 1111
-
XClient.exe
Password: 1111
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections