General
-
Target
873357eeca6b2391ccb682fa669d5177ed8afc27cf7a25ec7dfd09d4d2bf9c64.exe
-
Size
37KB
-
Sample
240629-bxzn5axgkg
-
MD5
dedb302aba9b69536c287633fbe41f5d
-
SHA1
bc3878c4370e139280d1fb9cb2258d6316c05e0c
-
SHA256
873357eeca6b2391ccb682fa669d5177ed8afc27cf7a25ec7dfd09d4d2bf9c64
-
SHA512
ef3f705cabc622bd3403c4e92206d24cae7f4342715ca3747d93d6e8a2300c821b2afd3a884b4085013ff00a9d211a5de95e48ab1c89227e65d5bb56479750f5
-
SSDEEP
768:Dcq50224u+jTmerM6tQ6B7xTFU9k2UOMhbbj:Dcqm224P2eOg7NFU9krOM1/
Behavioral task
behavioral1
Sample
873357eeca6b2391ccb682fa669d5177ed8afc27cf7a25ec7dfd09d4d2bf9c64.exe
Resource
win7-20240508-en
Malware Config
Extracted
xworm
5.0
94.156.68.110:4444
al4NPvQUtaeRLRpi
-
Install_directory
%AppData%
-
install_file
XClient.exe
Targets
-
-
Target
873357eeca6b2391ccb682fa669d5177ed8afc27cf7a25ec7dfd09d4d2bf9c64.exe
-
Size
37KB
-
MD5
dedb302aba9b69536c287633fbe41f5d
-
SHA1
bc3878c4370e139280d1fb9cb2258d6316c05e0c
-
SHA256
873357eeca6b2391ccb682fa669d5177ed8afc27cf7a25ec7dfd09d4d2bf9c64
-
SHA512
ef3f705cabc622bd3403c4e92206d24cae7f4342715ca3747d93d6e8a2300c821b2afd3a884b4085013ff00a9d211a5de95e48ab1c89227e65d5bb56479750f5
-
SSDEEP
768:Dcq50224u+jTmerM6tQ6B7xTFU9k2UOMhbbj:Dcqm224P2eOg7NFU9krOM1/
-
Detect Xworm Payload
-
Drops startup file
-