Overview

overview

10

Static

static

10

XClient3.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient3.exe

  • Size

    56KB

  • MD5

    3f06d91f28a580587a361e543ff057a5

  • SHA1

    207771bf750ff17d78d85c180ec518a8ebc06a95

  • SHA256

    7c9aff9f40917be3a922a947d788e4f5d984e6e1eb9b97ee42bb187a254f120c

  • SHA512

    6c058f4be13b8aab3d1a49e02a9a074775e476d0631d2b034f8aa1d8df0213ba8b5c2d0cf41ab608703e6fd0a03958196022231012c659cf00cad013f167d1a0

  • SSDEEP

    768:0tvR7/lbZ5ZqaLc+NhBkwrAJ4ynalVkbpQ5wM7y5wajrnaPtOshRpvt:gdzLc0D1rAJbaTkbpAwOajrnCtOsl1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

94.6.233.124:5004

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections