Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    56KB

  • MD5

    6c0147614e4332a192ae13a55c154081

  • SHA1

    c29b398e891f0024b1bab5a657e534f4e499f663

  • SHA256

    6888bc746c7f807e8eef58c0e6c44ed5e6f9e3eb3913e2130c3bdc76b67373fc

  • SHA512

    7913218b3fced28c91ec076f47527bbebf57277243797dfa433acdfbde6f5fbd4e3ed0ba7608a4fd84aede0db863e0191747d309b4d5d0057f92f6696c6909c2

  • SSDEEP

    1536:kaJ49x0QkFhf1iefvL+bpF005Z32POPp3c8D:kaJkxGf46T+bpF002POPhD

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

according-ti.gl.at.ply.gg:48304

Attributes
  • Install_directory

    %AppData%

  • install_file

    windowsupdater.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections