Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    80KB

  • MD5

    8c68d35f5ee8f8d9685330424478ff3d

  • SHA1

    331e4f6ee0c85b17a0eacde229262e3f898e71ad

  • SHA256

    e68acd23c0fd29fe419790a66d3345f7055514057f0b995521c612ff031db4d4

  • SHA512

    9576e5e6e34a1aa9fa354aa03afed6d255e2c0ef8e283d971a4a90bef73914c42c60623281c38702e8fca4b1f4627da81261bd476509e4e658c6a45dc9c572af

  • SSDEEP

    1536:NMRpSj2XpihHVWKGkbXkhaL26gvjQFZcO+REPK/JpLDJZ8R:KRpz4H8NkbX72Q0O+ROCJpLDJM

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

looking-memphis.gl.at.ply.gg:41251

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections