General

  • Target

    XClient.exe

  • Size

    101KB

  • MD5

    7e7c78851deff9d56a07aa149014f4f0

  • SHA1

    5f4caa9c70e3aa6994c76a416a3192b272879475

  • SHA256

    39505bf9b61e4886a5e886d9ec0b50f00ce691c8c7c6934fdb62a90ee0eb7997

  • SHA512

    0e07c6c400472d4322c438efc1e3a2e528dc764ee342baaddd25e75db4a3005d717f0e6d4b975eba6a7acb8483515f7e82b0887dbf0d42679c4c83c68fe00625

  • SSDEEP

    1536:JxqjQ+P04wsmJCgQ5eVOH9SNI5bj/OWVsqXl9ikVruPWVRDFaNIp1kbgwyr:sr85CAVOHUNIbj/OYlXqe1EIbkbgnr

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Detect Xworm Payload 1 IoCs
  • Neshta family
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections