Overview

overview

10

Static

static

10

client.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    client.exe

  • Size

    65KB

  • MD5

    6632620dbc49132f515527791a1c55ba

  • SHA1

    d72b35dc232d44ce968076e7173dc967797adbfc

  • SHA256

    a87a8e065ddf39baa58dd6fc0ff3062e78cce2341d422a1843fd9f4c20a1d4a5

  • SHA512

    dad3ec1d20cb4a5d40f85dc9cb2ede5a74d4070280e535a2a529fe284b7a7153539e001bf8013f5224405f65c04b80b773d78702b9ba9396625b36215ebce3fb

  • SSDEEP

    1536:yC1P2+/cU7jYsU+lZ+bYbmZG7MK6oOheqCB5:h52GxEkYbYbm2Oheqw5

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:29408

status-stack.gl.at.ply.gg:29408
Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections