General

  • Target

    KlarPanel.exe

  • Size

    98KB

  • MD5

    f3eae53998ff49cda5f288082800b6e5

  • SHA1

    d78969c8853423ecf067b831cfe7fc611346923e

  • SHA256

    5242bddfb259b0171b17de056e4ccaa01f63567c4b462ce981f04b3e2aa6100f

  • SHA512

    31708389c76e9a0813dfc2925add26667206807ebe188fc5bff3a973253ed729c40601173ef82278b783773fb22283481da3640dc64e0b2cda196c8584056add

  • SSDEEP

    1536:kIpwH+Ylrs1M9IoD1c8b/hi6Vg6PZuZKOmvE6eJq608II:kIpwHfi18b/hygOOExJq6XII

Score
10/10

Malware Config

Extracted

Family

xworm

C2

wednesday-knight.gl.at.ply.gg:48312

0xF488F3FA5541d79f0b1945ccA834cD6d939dD864:1

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • KlarPanel.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections