General

  • Target

    XClient.exe

  • Size

    173KB

  • MD5

    3486e437ba337ce28de5a0e1a68cbda5

  • SHA1

    edef0103b96ae41b2e6e9375d96af6330e2550d1

  • SHA256

    f54fba151d62734d29f3ddb89b25af706a91dffafa1b09f42fa7ed6169ae432e

  • SHA512

    d47ba2b65fab3a4b852a75aea5c1cf44dd9a27530bbda6ddd44f6594fdd0735a23f443f10055a217b6c95f0ee2ef3735dc2dec2e9fb5d67ea4bf6b3eeaaa23bc

  • SSDEEP

    3072:Y/nddRRUNXAb+/oRuOV4M4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvp:WJRWAbQMgVqwlL

Score
10/10

Malware Config

Extracted

Family

xworm

C2

series-ate.gl.at.ply.gg:62459

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections