Overview

overview

10

Static

static

10

XClient_3.exe

windows7-x64

10

XClient_3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient_3.bin

  • Size

    36KB

  • MD5

    a4b63c56b018a0df0864ac93518e23f2

  • SHA1

    aac28ab89ed8e522b3c98edd086e264a844cb1f3

  • SHA256

    2eb02ce78ef2d03967bd2bd9bfca795a49c769120a65515234318bafe2106e50

  • SHA512

    045e25c30bf9fd25c04bef21cd08374f8c5a6101bbe0988998e0d368aa90e4af14b5579a5219f9eeedc72303d55150fce86cd13b394ebb28d1faadfd768e21d3

  • SSDEEP

    768:iJTGHc+WWls9fMO20ImlVFp/X/FP79lDO9hDApi:i5Yc40bI6TnFz9lDO9R

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

16.ip.gl.ply.gg:15179

Mutex

wPJHugnoj2JkmLtM

Attributes
  • install_file

    svchost.exe

aes.plain

Signatures

  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient_3.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections