Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    40KB

  • MD5

    af354b2efe9320b6afa436dae078cf9b

  • SHA1

    b8f8b1c1ee3a58316403be9f3dedd52d5b607d67

  • SHA256

    debcbb128e286c52c2312a5ed81043b0459eea04aed5041b4ab58e78f25927dd

  • SHA512

    8783ec495c7a8de23fe4dd2219c88850518fe426ecac514286e338711c3a84ca4ec75ff2f28b8edb2ee0cc02d45687537fa531ee06e044087530d2c84be7d3a8

  • SSDEEP

    768:hg+N5oRXGQHd0VHbXn0/owfnFPO90w6cOphcUd8Ox:a+8RX3AEHPFW90w6cOpX8o

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

10.18.44.229:9017

Mutex

ViLbpLdlsnQk3Y6m

Attributes
  • install_file

    bin.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections