Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    181KB

  • MD5

    3628da722540b0be5dec3ba40271f3b8

  • SHA1

    7d0ff4e713a9993467233195fb20078a50d675de

  • SHA256

    a3d8fdf3a4c25e3b78a557f93fbfca287ed25d593e019b8db030fb2fa4c815de

  • SHA512

    9f8b6c8cc3b81ac576368626f2908d5d03b08976a159f69d72e6533eccef78b2ae7731a8f945b80962dee6b9e74ca5fd72721b732414f17a31ceab95e5b20990

  • SSDEEP

    3072:JPBOjwWBbI2HUBHKBJ5tOUppz2M+lmsolAIrRuw+mqv9j1MWLQI:CjfBbFNBjV+lDAA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

ezhack-60175.portmap.io:60175

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections