Overview

overview

10

Static

static

10

XClient_1.exe

windows7-x64

10

XClient_1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient_1.bin

  • Size

    37KB

  • MD5

    d204151369e95d04cfbfbfc4c798bde7

  • SHA1

    a4990fa7a173630382fcca91e20911727009d81e

  • SHA256

    820bb1a31f421b90ea51efc3e71cc720c8c2784fb1e882e732e8fafb8631a389

  • SHA512

    e0fed0783d34c679c0687780043ecbad19408c0e16fc412dbb6e588dc8062dd52bd3ea325e2eaa879466121f3fa0474d85333300d08b2bf775df9602162d0625

  • SSDEEP

    768:AiPuZuVxjgLLFmwR+rj561216LH/FP192HOph6ro:FGZuPgLq96McLfFt92HOpqo

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

16.ip.gl.ply.gg:15179

Mutex

D7CpLjvxLaQ6ZiY8

Attributes
  • install_file

    svchost.exe

aes.plain

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient_1.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections