Static

static

10

Resubmissions

06/08/2024, 21:35

240806-1fb9ya1eqm 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    171KB

  • MD5

    2900b114b5975989bbb55be6b9f57b1b

  • SHA1

    ea25f69f4ac7655ed3b7c392f442b4a668c307aa

  • SHA256

    0beb05f282476e35313341180a25bdb10742df0e64ab2f5389b934b890d8af03

  • SHA512

    8c0b51f7373a1c2c6555067730571f4c64ba966abd6a3edbdf0732611000af4be78f252457f1ef7e65549903f7b413a451c064a731dfae27eb2d930671dab268

  • SSDEEP

    3072:PaibnzYZvMoOou4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvp:jb2vMxgVqwlL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

192.168.1.3:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections