General
- Target XWormClient.exe
- Size 104KB
- Sample261009-2dcclacz8m
- SHA256 78e18b962568b0b04b28d1cc8d4f030b1613b63dba7d646d8b8d3330a644718c
- MD5 a9edd7f8e8611943f7226cd76487b730
- SHA1 f0a89a992dc14f144ccb127b81dfb08a23401ff9
- SHA512 dd1d70f617c4d82aa44eb971adb96c4bc5d6a388b94c2e7c4c8482ff4d638e8f26eb58626d1ca233df936e3fb8ea6db19c071eb2c37475bb31e1bc09037d201c
- SSDEEP 1536:kkFThqSWdoTCJY+/pl0dC8Jv0XWK0TX0VdnxZ7vdsHzl4uEfZAqbBnx8/M:zFtqs5oXF0oVdxZ7vdsHMKqbBD
- TLSH T1B5A34A4EFB508A58C21C5F7BC963750842E9E8AB656BFF2F14C49DF19E228CC894F844
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target XWormClient.exe
- Size 104KB
- SHA256 78e18b962568b0b04b28d1cc8d4f030b1613b63dba7d646d8b8d3330a644718c
- MD5 a9edd7f8e8611943f7226cd76487b730
- SHA1 f0a89a992dc14f144ccb127b81dfb08a23401ff9
- SHA512 dd1d70f617c4d82aa44eb971adb96c4bc5d6a388b94c2e7c4c8482ff4d638e8f26eb58626d1ca233df936e3fb8ea6db19c071eb2c37475bb31e1bc09037d201c
- SSDEEP 1536:kkFThqSWdoTCJY+/pl0dC8Jv0XWK0TX0VdnxZ7vdsHzl4uEfZAqbBnx8/M:zFtqs5oXF0oVdxZ7vdsHMKqbBD
- TLSH T1B5A34A4EFB508A58C21C5F7BC963750842E9E8AB656BFF2F14C49DF19E228CC894F844
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.