Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    65KB

  • MD5

    7fea7a00ca109b4c8e18760a78684eab

  • SHA1

    802e17d411be9761a2809a02c61e93863b02c51e

  • SHA256

    5d9c54ae7a233daf107c7c5b5d733c26633acdca3b5168bdb984934fc69e424c

  • SHA512

    923e213171a43635c14b4758ada1e8df629ff33f1fb98e830d759ad9a1f2a54a9db880123f030f9485fafddae749872819c80f9c41e06dc53003785abf625a82

  • SSDEEP

    1536:go7FbU3nD+R0OOMUfBbvRD+WUO0jBG2K:77FbU+k5b5SO0jBNK

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

h2cker.ddns.net:194

h2cker.ddns.net:0194
Attributes
  • Install_directory

    %ProgramData%

  • install_file

    Service.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections