Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    63KB

  • MD5

    7bba30b5a60536c1afa5ec8e9479978f

  • SHA1

    007df0303a50700e58b7d957631a7dc7f9db50b7

  • SHA256

    a0dd5c5b91624611fd1265bf3e3debe41ce64a6e603f1a0bfd7420ed7d38abdb

  • SHA512

    919600c7974f342282eebbb56e57e5b759b1d7086e8671b71ea8096af2cc84cce7e7168bf12acb04a004b19cd56d07bb29402ce12804b0ce42208c45d39e29d3

  • SSDEEP

    1536:dl0Wd68TD4xeyAkb0CM8/ZQaaWVe8h6ICmQOqIzCJa:d2DxeyAkbVhQa94OqIeJa

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

series-pencil.gl.at.ply.gg:59416

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections