Overview

overview

10

Static

static

10

Licks client.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Licks client.exe

  • Size

    38KB

  • MD5

    255fed77f98efa2d150d9675a5d7470f

  • SHA1

    526fb9504e3d93186dc01b9b31e6ac102be8433f

  • SHA256

    185ef8159570d76337a58511b358abb63b806e9c13e317db21fbdf5ef2058731

  • SHA512

    992635216ecdbd15259c3db5110ca525195ebd28ce2c2e4184f56f73d099fa6cc7b0c0fcbd8110c7b082504f11dc0db6492a16021ca846d1ab09f92e53b6ce52

  • SSDEEP

    768:F3WXQw2ZV1jLfDaBrEvjsGXFyc9BjR6OO/hcDQnlj:F3WXCNnaBrW7F39xR6OO/5lj

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

17.ip.gl.ply.gg:23531

<Xwormmm>:1234
Mutex

NgNiHxFIyiHHx5im

Attributes
  • Install_directory

    %Temp%

  • install_file

    $77Lol.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Licks client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections