xworm | XClient[.]bin[.]exe

General

Target
XClient.bin.exe
Size 50KB
Sample230406-tegppsdg45
SHA256 73accd4c8a54dbd0aee9321d98a00ba096ebfddd006c7a21f9cc1f050e2a1e61
MD5 b091fdae8866bc6e9637921b04ec2b75
SHA1 ff436e7ad3ddb25446454af22dec9fa1c02b0f0d
SHA512 feee5507568be7c01ecce9619a30867fb3460a5fc29cb131679dd666590c757f0863291770bcfd8ff8bc80b46fe2d72b1ea373f6000fce3e1301cc6fe3a81109
SSDEEP 1536:URzZt3TAMvJb4uUMZVLHrbtateVD1YugOd9tTEd:URFt3T7RdUojrbtYOd96d
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

xworm

Malware Config

Extracted

Family

xworm

C2

212.ip.ply.gg:25428

Attributes

install_file
USB.exe

Signatures

Xworm family
xworm

File Explorer

XClient.bin.exe

.exe 50KB

XClient.bin.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 73accd4c8a54dbd0aee9321d98a00ba096ebfddd006c7a21f9cc1f050e2a1e61
MD5 b091fdae8866bc6e9637921b04ec2b75
SHA1 ff436e7ad3ddb25446454af22dec9fa1c02b0f0d
SHA512 feee5507568be7c01ecce9619a30867fb3460a5fc29cb131679dd666590c757f0863291770bcfd8ff8bc80b46fe2d72b1ea373f6000fce3e1301cc6fe3a81109
SSDEEP 1536:URzZt3TAMvJb4uUMZVLHrbtateVD1YugOd9tTEd:URFt3T7RdUojrbtYOd96d
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

56366

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing