General

  • Target

    island.exe

  • Size

    241KB

  • MD5

    6c8f9060de5c7573301f922bb0a93c0b

  • SHA1

    4b343387112a6a7f4705b7e9bc246d51dc371e3c

  • SHA256

    570380961c528645d75a903f205ca52bbca6b2bbd5e7ee4706ca2c1210591157

  • SHA512

    57b53b7587568f587a289809214446e456e68b1302955ef7e2537256500251422045d8499f3d044dcbee8e3a579e53ac6e96dc2fd0eb76244a05195a1c822ff5

  • SSDEEP

    6144:I2yPi20ZfOqbG84aUhcX7elbKTua9bfF/H9d9n:I24iDZ2Na3X3u+

Score
10/10

Malware Config

Extracted

Family

xworm

C2

zip-connection.gl.at.ply.gg:33171

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • island.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections