General

  • Target

    j.exe

  • Size

    66KB

  • MD5

    9c80f155a33d34f6deede20b10c9c3da

  • SHA1

    a6b3c0fa6c2888735c4b7f841a04e8628dd293ae

  • SHA256

    7e8200654fe03cab3bd6dc9ebb4a603fcf0e1203de7c4496fa03af4591778e09

  • SHA512

    93c262894e159db8c956f4a22f5837f9f377af81161de2ac753d9899427c5ce4d79008fc996e2c76c6c660a7626d2b9bd38bb04022e2b6013bc2231de1312f0f

  • SSDEEP

    1536:K/Wt9q5XZ2kHIc06PDJUORlKGbxRUoL+WI8G6xtO317uLo:Dw5zLcqKGbxR1+WI87O31Qo

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:15863

Attributes
  • Install_directory

    %AppData%

  • install_file

    client.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • j.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections