Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    75KB

  • MD5

    56a77f691d904b1762ed1147d1f3f3b2

  • SHA1

    4f5adbf9c6b3ca7d0f6fa2842aac09e2f1b3ce82

  • SHA256

    0bab1f655bd738783affa10d00f06deaf70d66124a1cdfa73db8c8d2ffba430d

  • SHA512

    9207ac907acc12fcf226f0e88fc40c39bd353c066fd065f12d277502ca47513fa27833f9ac49e84938eb1c7fb070748c4f71ad07949519119e09f3dc1846861f

  • SSDEEP

    1536:cvz9EU81Zuty7Sbsib+0xjVq6dgd63YOfFt:kzaUmufb+sVRgd6oOfD

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

10.1.1.110:4545

192.168.50.44:4545
Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections