Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    63KB

  • MD5

    6eaaef181b60b56ea309775762543b9b

  • SHA1

    edc01cbddade0de24855f29b7a4f6b745359d432

  • SHA256

    56b8420aaeca69a0ec4a2e75dc405d5350e61a248beee541a641f6a312bfa22d

  • SHA512

    59e25b03208a1e35b6b238aef473e4a416f5e760d220a68549c7a03398a148d930489c158610e65caff929e93fcada6a720ef77eeb47085dc151e3df14a1fca2

  • SSDEEP

    1536:Ux1HPsws9VcbF4ng+APcxjA+barRdZgLXqOxJhIt:06ws9VcbOgYFA+bazZgLXqO3Ct

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

193.161.193.99:3333

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections