Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    52KB

  • MD5

    fb700747416f902961fe642b07ef248a

  • SHA1

    e052f27b5b4116623480e771efb6e20ad265f274

  • SHA256

    b13703f5b26921fb81e2c8267307003de4d8121f230ff0c3d9c007f18eacbdd4

  • SHA512

    24d3fd365088c758b3100fe0bc744de9a2770cf36096a1c9402358f3dff86d5728c093517fe45fee5f211c5c36c22a645ac88cf32db91203695d700dcddea22b

  • SSDEEP

    1536:7Hu4t7Marqw9bEUx7xSkbkE/xe6yROdAJtN:7HFt7MaJ9AUx7xSkbkDFROdAHN

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

dc-coleman.gl.at.ply.gg:42550

Attributes
  • Install_directory

    %AppData%

  • install_file

    runbroker300.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections