Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    74KB

  • MD5

    a9476f60906de710a6f310df0f10bfc1

  • SHA1

    09312f9f9ba57555e383bd51b3f0f4824a430e92

  • SHA256

    ab38e957f4c3b26935815921902e28c98b371c0b25f21e36e3533b45ade72b24

  • SHA512

    27083810e4a1331ba19bbaf74809bfdfad3ace592fbaf09c3c33b83d0ae96f1d3c0c6bc6329bda2964b9e442b7fb97dd02349741031c83095f9b85d665ec2594

  • SSDEEP

    1536:y729B5//MMZ3zBC4dAKdbBoPng33Mq6BnEO4dv5o5oP4Gd:i29THMQtdLbBoIbOmv5bd

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

rating-fits.gl.at.ply.gg:29634

Attributes
  • Install_directory

    %Public%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections