Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    190KB

  • MD5

    83cb04e3aa0c977d3b832f6b17535a8f

  • SHA1

    ff7ae901fa296819da153243d0961fb734b57d7e

  • SHA256

    ef4585d97674084f20c78ecc823bde0362c2f6a56494465bc67edf72a421c465

  • SHA512

    b86f564e6d826ad5dfa1d01b7becb701122cfedebc36cbc8288f597a2ac209dce99abf2b40641d3a7966d201e89e396423aa5de749ad3467bc1c75bfbd8245e4

  • SSDEEP

    3072:mV2NCpGPxB3ClsefVpbpiAgIOjJ44NpVq8BxFRzaqF+o2GQJ7/JzqVfGvp:0QqsOHb0Am4gVqwlL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

publisher-lcd.gl.at.ply.gg:34441

Attributes
  • Install_directory

    %AppData%

  • install_file

    pornhub.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections