Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    245KB

  • MD5

    53f5092f77921dcbb8e52edb090b8bfa

  • SHA1

    61d75c4b0663b8efc5f6d92239a6b4d0266411b1

  • SHA256

    54655c977f050719d29cee1d384bb2cbd09fec8626c8adc56f688a39a3f88c4c

  • SHA512

    883fbcc4cf4a775de09f9b4de85324b57dbafd07dea8215944bdfe929907157cbab73ec2bf68d5816156dab3fb9dd463d10b21c1ab1ef02fd6a9a843c5712d56

  • SSDEEP

    6144:KmqE2E8nnbbfPrGAUhcX7elbKTua9bfF/H9d9n:+nXrGA3X3u+

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

x-bench.gl.at.ply.gg:33344

itself-uncertainty.gl.at.ply.gg:33344
Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections