Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    60KB

  • MD5

    154206b1b18a358424cd6235aa552a92

  • SHA1

    140c28c56eeba9b283e6aff52e27526a56d627c6

  • SHA256

    4f0b509d209c8e67dc1b72e8bc5357455fd7e8d22b60df6d40be7c5af3e60823

  • SHA512

    fd9f44d84989d4750fd8553798565f67a966c15f2916fbdd3923cc94ea820532a90bfb4b1e4c5fa33f4912162912e0e56f05573b02539de3f0812374a91a1a89

  • SSDEEP

    1536:/qOFxmH2qozodsd/T3kJAHQdybdPS2IGzxOz3S7b:/tFGo6eLkJ4aybdPXzxOzi7b

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

sports-deviant.gl.at.ply.gg:43888

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections