Overview

overview

10

Static

static

10

XnullClient.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XnullClient.exe

  • Size

    246KB

  • MD5

    e75aa49c9c45f34d7adc06c26cb5713b

  • SHA1

    26d70fa548bf244ef8f3918e8eac34270fc285b7

  • SHA256

    7c0047ceec6b6dab29c0fe2774fcbe0e514f9349ce02cf900da72104490c60ac

  • SHA512

    409893b10cb8fe16270f10f0c6d3ba22cd1660e5e7ceb2eb32b2b82a22c3dabf61d42ad1601c1976b7fd82de4e8ed4226fae20012a9290dcc37675c06868a0d7

  • SSDEEP

    3072:OsirFsIbSyEzhnCeOA3Mlea8SKfbzxcwg7es6/Vsb8VKTu549oJMfF/H9N3Ky9NS:rVIboseaUhcX7elbKTua9bfF/H9d9n

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/LN6JZUsV

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XnullClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections