Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    31KB

  • MD5

    9a152a95f8e2d4d331bd86da740fa1d7

  • SHA1

    f91dd6c0bb667132fb9877bc168c25a771c254ec

  • SHA256

    3209fafd8badfa697691cfbdb206a07725df42c2e6b3b05c2f54b9d66fef018b

  • SHA512

    a7da8fdad07020665f2e9430d38cc5f1b1b70bbd53a8e2130609bf461051b6c44914432d67ca45b73d4b356289e55a66b8f165b0dd12f16eec7055ceb7f264bc

  • SSDEEP

    384:EeAwIGmeffcbWICWv/0ILZGPc7B0hYACSqRr4TKuRugtFuBLTIOZw/WVnvn9IkVI:Yecbl/b37BMYAoRsuuBFE9R+ROqh8b0

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

109.195.94.247:7000

Mutex

qONggGYjwC240XZ4

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections