Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Resubmissions

23/07/2023, 20:49

230723-zmgybsgg63 10

23/07/2023, 20:48

230723-zlplsahc4w 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    77KB

  • MD5

    c29662bef6ec8ccbf844f635d5971f6f

  • SHA1

    c3205e213cd292502a02cfb46cfe67b211a10e9a

  • SHA256

    d238dcf4dcd213a4a9560d5125eb0235460c7bd4317b91f1b60577879a824846

  • SHA512

    9603598cb20898bc65b46ef951b9f911e61259f0e8e1acbd881db587c600a6f64a19a624a70f6c89a3e0f4a860e99bba40bb692fe5269cbc29836b0acc9207f5

  • SSDEEP

    1536:2I1teg3pKNRawsX5zg4bTHqF0iAEOkihyzEjB:2I1dJ9504bTC0PEOkihymB

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

harrypotta.ddns.net:6882

Attributes
  • install_file

    USB.exe

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections