Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    64KB

  • MD5

    a33ae799cdd4bdcd0783dcf6d1b10205

  • SHA1

    1bf342162ba6c94c92d4f72979f257dc1b44432c

  • SHA256

    dd0cafd3196894be850ae895f57989b22fef21251f2654f36b26d5ee82a687fc

  • SHA512

    e1ad11085f1f8f6aeb02293c7fdaf2fa1f69fd7385a2cd17eae06807d5f2023c27b2737adf8985843b1e50d2dface21af6f9024b225335cd390e6295d39eea1f

  • SSDEEP

    1536:6eFhrX7ZlKC8hwMPKibw0Co5xfFkw5SUhTD4OYIzA:hFhrX4h3PlbHdd558OYiA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

ameerpplus.ddns.net:191

ameerpplus.ddns.net:0191
Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections