General
-
Target
7d68c4650161b00510b6fd0ef8317997f4a262ad6d53544ae86e335c9b7ea3ceN
-
Size
68KB
-
MD5
9ba65b1cec7b981e2eb869d2cbf6be00
-
SHA1
a36e25b6ef250c0ff1f61d1bb77b5e88b7c69bc5
-
SHA256
7d68c4650161b00510b6fd0ef8317997f4a262ad6d53544ae86e335c9b7ea3ce
-
SHA512
86f873a183462a20493f8d4fb3e44c644621d5f03adb0e38e600e2ae7a21fc1eaef6ab1782b1e546c02ee2891e32bed88c11408a331890d91048cbf3ab1092fb
-
SSDEEP
1536:fpkLB+XhuvvlWHeym2J57BnoiS1A+bpycMicd160MhvO7ogns:fG2eP2vBVL+bpeJMJO7bs
Score
10/10
Malware Config
Extracted
Family
xworm
C2
127.0.0.1:62086
22.ip.gl.ply.gg:62086
Attributes
-
Install_directory
%AppData%
-
install_file
XClient.exe
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
7d68c4650161b00510b6fd0ef8317997f4a262ad6d53544ae86e335c9b7ea3ceN
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections