Resubmissions

10-02-2025 21:27

250210-1a4r1ayjd1 10

10-02-2025 21:24

250210-z85lhsxnhr 10

General

  • Target

    XClient.exe

  • Size

    63KB

  • MD5

    b4e148797a99791b7d0aeead19b680ea

  • SHA1

    03066b079fd8915c7876c8a64f51c9c80fe4bbc4

  • SHA256

    47976794f020cd6a26baeabaec503610fdf89f6cc9a2f843ee2aa078db6e63a9

  • SHA512

    d0b270d8adbaeb715ed747aa1c1a8b89deb892b45fd147c95752a91ef9c6bda175662d011fc6d77e6c611d55e94a36ccef16aca255aafa8aab80897c26e3b1ec

  • SSDEEP

    1536:cxl6n1aLNbE3gRBd9XhS2kL++bTIDx3ZLL6WnFO5tgo:cr84Rg3edfS2kL++bTyLJFO5yo

Score
10/10

Malware Config

Extracted

Family

xworm

C2

data-save.gl.at.ply.gg:61841

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections