General
-
Target
v14.exe
-
Size
37KB
-
MD5
f3176b6a3fcab34a7df5fdd762c37bf9
-
SHA1
6bf793c3fd89b5a5438151cbd9ea447a4cabc42c
-
SHA256
a0992a4a5829667c14120cdba4db8e9e6c87d3c7c1af623d32513f306ca1ad49
-
SHA512
9e9b739c9b425e642d561605c80e5e4849b1f03c93075888fc10fb95022757b1832eb4ab304644a3e70d458cb08023e2dea828e09c0d1f6fde8ecf527f1509b0
-
SSDEEP
384:G/Um5pBB4EP1vNhJfyS0vuuNatELvr+C5mbTT3rzMurARQaKgO0/pkFMAzNLTAZB:9gt8nyC5kTdsRFOTFQ9YCOMhm4R
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
Madz-34700.portmap.io:8576
193.161.193.99:8576
Mutex
r4xxM4t46XJFT71H
Attributes
-
Install_directory
%AppData%
-
install_file
XClient.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
v14.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections