General

  • Target

    svetory clientx.exe

  • Size

    68KB

  • MD5

    a81c378267a1414e8cebda15a21a97cf

  • SHA1

    95e2108b4a2477074ea5283e7f3bd189ea63c743

  • SHA256

    691e59d80ce997f4e56c59bf2e8b1190c30e00974e219d8230cb7631a5eb2b0c

  • SHA512

    f71134cb5718aebc2e6bced810c9a1f3f56ae4b28977a8c60d0b4378b0696f41cdd204d0165f625d46651bece4cb3ea86099df9aab1e75183559b365e9be1c5b

  • SSDEEP

    1536:tL8P1y5pddiv8U36+zkleM0vqJabJckl18nC6PV9OLPHXi:akpvg6+cNXAbJm9OLP3i

Score
10/10

Malware Config

Extracted

Family

xworm

C2

147.185.221.23:15863

Attributes
  • Install_directory

    %AppData%

  • install_file

    SystemUser.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svetory clientx.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections