Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    32KB

  • MD5

    882ebc7ef4605a2ae67fdad5c0d63fee

  • SHA1

    1fcd7f88438829263595d486bac9aac0b868f5e0

  • SHA256

    2626e56ede9c47acfdf1c75d7268ef12a1d5e1c708dcefce7c83cd301c570eac

  • SHA512

    cfacfff4880227c93b57bd2ccc2ece97f6395f80c86d144eec304fba843c499343298d5125014d787fb34ef9191484e72491580a24da7819be5029f63f26944f

  • SSDEEP

    384:BYxRXcrP31VZBELRUnvJff3cdiwCYRJpkFTBLToOZwxJd2v99Ikuis27VFxOjhbp:tPjgRevJ3cdUYGF/9jBOjhbb1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

GU2qdEd8Di3MuHJd

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/pcnndJYB

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections