Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    81KB

  • MD5

    24fd3a80bf342400615225d0caca8b58

  • SHA1

    ccb8697c26847382a755e5c3c8491b758de24a6e

  • SHA256

    22dd079af2a468ad74655a0e5bfd5268f1d8d6a0c35ad615a47647d03d89565a

  • SHA512

    5073b04f096a946733833320343ec100dc2083e71fde6fa7e185f8b062245e3d82eaecb2458019c949c1984c48d1918be50b4c90089de9c6175858bdc27f28dd

  • SSDEEP

    1536:HxcOXdn/Qy5aYcnI4bZI62jaVO3oe0IZoR6tKmcOrvq3D2qwS:yidn/Qy0YcnhbZIbopWoXOrvqT2HS

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:443

192.168.0.101:443

217.105.23.4:443
Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections