Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    74KB

  • MD5

    2f5b91f3a22481bbd86adba924303344

  • SHA1

    0dec06b6a0ed5b88d32895aeb8a399755890b2fa

  • SHA256

    6c6cc20c075c3ac317dd96edb08ddb8b039624f128564f1adce50be214d5f0b2

  • SHA512

    949759794b97ab2b7ea1c332654475dcf563ed7a0fe4ad73a8df0329a3f65a4c0849407375581fd56f8a9b281531d12246f3c0b5a237e7f1d06ad9e135582b73

  • SSDEEP

    1536:v7R5DJ0cc290sKSrb/FvhG0gp8V6KED0O93qsT:vVBWj2eqrb9vhpgpJ0O9/T

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

176.205.45.103:4782

Attributes
  • install_file

    nito-gen.exe

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections