General

  • Target

    XClient4.exe

  • Size

    75KB

  • MD5

    421b88750cea73bdcbf88ab097bed8ca

  • SHA1

    9a24d44a30f38b863c577bf27d8eecbee86e67c0

  • SHA256

    115680de5ea3b9e878b65b13bcc583a6455c2246e747ae4195ab929bcb820a88

  • SHA512

    4451d505fa4dbf64342dac7679b3c8bc180193dd1a1a11717e44988a5102badb643a9ee212fc218065313ea685bea7a9e4de13181c59241eac55b3e4dea174ee

  • SSDEEP

    1536:cTSCBOGYzaPyRnZZx5bIy86jTz6IQ5SVsO0BcEL/vg:uSpGS4yRZxbIUHeHOHELHg

Score
10/10

Malware Config

Extracted

Family

xworm

C2

series-ate.gl.at.ply.gg:62459

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections