Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    71KB

  • MD5

    29c205a134b25358d7e42b20699de11c

  • SHA1

    2332f7f57723f44cd95fded17b6e006bc39b7bd4

  • SHA256

    af48082157761bfbefc93342f033af42d3c22e6c8be580cf9c1c9100fe91e744

  • SHA512

    74ea9b7ca48165c369383c91f2aef516d1614dd6ba118c55dabb17d9f642d97a6845446ac62e5937e122085253693fc9a9033dc91009caa268f5dcced5c5c7ac

  • SSDEEP

    768:RtAwFBQxVtVUsVQsnNuLFW2IyJ0vLKEfEb7gD2JSaGy+1QI6ydOIHwh/deRZ9Ai:XyxfdiCNT00eb0D6OyHI6ydOmwBIDGi

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:1244

192.168.1.15:1244
Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections