Overview

overview

10

Static

static

10

hexxapubclientV2.exe

windows10-2004-x64

10

hexxapubclientV2.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    hexxapubclientV2.exe

  • Size

    40KB

  • MD5

    4052ddfd2d29fda9e5983cbf9d4d0d35

  • SHA1

    3f6a23a4d331f072eec9f05ff0878d1da0e1d7c9

  • SHA256

    edde470ac7e7e17887b906e63c8b68a35aef3b7cf8c4af1788356dd4d2cff43c

  • SHA512

    7dd71f09f50c27d79c833a9aa1db19e56c7d2cb2779f1fc842d08473dabcc4021efaec2ff822c28002408553fa831b14ffbebb5be3722d2ab3481be79bcbe3b5

  • SSDEEP

    768:ZdE7nvHTrqlrAmJRXFS5tF5PT95IOMhq3ES:ZdszGtAmJ1FSLFx95IOMY9

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

192.168.1.109:7000

2.49.230.162:7000
Mutex

V2hIm2ekXLgm1g1A

Attributes
  • Install_directory

    %AppData%

  • install_file

    hexxaclientV2.6.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hexxapubclientV2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections