General

  • Target

    AllCheats.exe

  • Size

    62KB

  • MD5

    0cea8d1794672ec6ee2b9566a69be6f7

  • SHA1

    e67244ae8e6b513b21073ea5d25c214faa087fc2

  • SHA256

    bc3b39ca07ccb1e0d7b71c103b759fce819d1aa492321b19c7b39023c1fa1b19

  • SHA512

    5f35f979e08142787071991ec3dcbd1c9990b6538928c44f224bb98c5ee490b6502d296207a62950028f8c535fb571aa279eeca1b187ab4a874748498992849b

  • SSDEEP

    768:MKOhtw7MAV2ycMmnu9y6Dsr1Er+ba6fLX89DfovNbrE6POm8hk9dM/j:MB3+xmajDsRlba6TMqhE6POm8sdWj

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:48534

localhost:48534

domain-vote.gl.at.ply.gg:48534

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AllCheats.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.