Overview

overview

10

Static

static

10

XClient11.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient11.exe

  • Size

    82KB

  • MD5

    1d121ff818b54ac8731a85559327eb1b

  • SHA1

    b0526bb13155efad6dd8f4fb4243162aaddab439

  • SHA256

    7e0cedf6db698bec525bdb7f3d90631632b6a51368a7bdddca3dc561aa21feae

  • SHA512

    4d9986fb5b3f5d4340c0c847ed1834431a8576aa3b961e92798e9abc942baeae12aafaac8600368feced07b9ca5ae2a6e7ff628b5ad8746e7c2737e1423f59f2

  • SSDEEP

    1536:xHytNUN6yT0moPL8LWwtpd48awbK+Sn797G8ASSg6uVzOaQrYO7PUu:xcPzQWHwbKkFSDpO+OQu

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    System.exe

  • pastebin_url

    https://pastebin.com/raw/erNS5DCf

  • telegram

    https://api.telegram.org/bot6322711372:AAGbIfXFhlNS1SFeiUdz8wnaxv2bCiayqnI/sendMessage?chat_id=1098594855

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient11.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections