Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    69KB

  • MD5

    f1909b3449744164af454e7a4f7e538e

  • SHA1

    0d51d813f43642a49f28bba6815a60ad7bcbf508

  • SHA256

    68a4079f5281470d2ff60204a32795eb448f098b78292ea71bd8ab252c322d25

  • SHA512

    5589754378b75a6ad05febf8d078de20d8e1a4d79a77908c982dcb8d97599abdde16d65426b97ba1912809730a5cc606939678a479884b461b9ca623e4f1f69a

  • SSDEEP

    1536:KAFsr45HknT+o2UgjN5a5sGr1rIbjn4rIkMh59zTOtVzL:XFsr4kT+3VC5V1rIbj4Et93OtRL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

ameerpplus.ddns.net:192

ameerpplus.ddns.net:0192
Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections