Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    240416-2xk4vaeh46_pw_infected.zip

  • Size

    37KB

  • MD5

    1b80eebcaae282fe19149d0e70b07c99

  • SHA1

    80f93fdc1bdd3a5ab242b5bb0100f8920eb7fba0

  • SHA256

    7d3a8327365b52dbd5b9f32298d9c0bdb17a07868bb42402dabdda46adca1a20

  • SHA512

    3a8b66ebc512b465636347a23cee2e7177d10a6c270e227093b781b1145ff3910f3f278373eccdbe3bc143176803e6cb9a0d25abf5bd8c31f8a0852fe0473272

  • SSDEEP

    768:AknIJcBNTWWlMVwsvsOydphdu4wCaqwahagAk04D+QP19Zy2AK2Hc/Q2h:AZk/lM1UOMhdu4PaZzgAQ5P122AKS0QY

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/6bn9Giaq

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 240416-2xk4vaeh46_pw_infected.zip
    .zip

    Password: infected

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections