Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    246KB

  • MD5

    b8462ac801fc81043f671d625fc805c9

  • SHA1

    25f4cc396bada50c1517f5992aab50132b7b748b

  • SHA256

    0bf5d781df404107242c472e752df707b23497dc2e7ea1ccc44800561a75d0b6

  • SHA512

    317ec999f9751f0bf768d0acae9c4f153b6f157f095f1cf3b3e7329fc15dffe629051677bbced474520086fb8d7bb48096108db4f062e359b7920fe7785cdda1

  • SSDEEP

    6144:BX07bFvjWbC8zNUhcX7elbKTua9bfF/H9d9n:l0fFrl8zN3X3u+

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

centre-shaped.gl.at.ply.gg:30014

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    .exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections