Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    31KB

  • MD5

    9876e0ed31dc4384dfec99d649eb587b

  • SHA1

    d75d7f905e43866fd1361bc56296f4ac5aac1a86

  • SHA256

    9acc59e5318dc364637b3ecc4fe8d5b6a9aed3e00fb82933bbc450dd97063f3f

  • SHA512

    f874bde059baae82bc1bf57ac38cf90cfe13a4e087d5ac7bc43ce4dd11559192561a4cfc10022638027f1cb1904d0c532d7b35bdde3356a514e7fe162506c1ed

  • SSDEEP

    384:7uTNqCr4TOXqMkc7qiPRr49hL5vwDs2ETIifHR+gtFqBLTiZw/WNCvK9IkVugxO3:Ck2lUD5IePfHZFr9RdOjhk/3vu

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

WNIKO1-39869.portmap.host:39869

Mutex

n0Mw24jO6Jcuye2F

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections