Resubmissions
21-01-2025 05:58
250121-gphcrszkgv 10
General
-
Target
XClient.exe
-
Size
33KB
-
MD5
179482cceb10d4670100eb9a630bb311
-
SHA1
99cbb9197c893ab46b6110d2235f91daf1d41513
-
SHA256
2da37fb7b6f492f2075da78b374057fb94e27a80165d48a5c728ddf5d7819233
-
SHA512
204006f23a305602fdf304f69eb74233bc0cdb8844779b3266cbdec529629f2a7840a1d18409bc251b0c39811268533334a9d3204baf3ef6804e52947ac2cc46
-
SSDEEP
384:Tl+PkjD9+E5MFs7iui8L7zKM42pfL3iB7OxVqWqKRApkFXBLTsOZwpGN2v99IkuW:J+CD93W03v42JiB70lVF49j9vOjhWbD
Score
10/10
Malware Config
Extracted
Family
xworm
Version
5.0
C2
46.146.46.81:7000
46.146.46.81:7000:7000
Mutex
fbhq2WHCedXyFd07
Attributes
-
install_file
svchost.exe
aes.plain
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
XClient.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections