Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    74KB

  • MD5

    e21bcc2362b18b504b6386f57e219bb3

  • SHA1

    2e295225d75494593a881ad625f94160bd1a889e

  • SHA256

    385116700808433c18a5f8c4eeb3d9c8457f0c2204cd1c6201646251695f82c9

  • SHA512

    b9846473185aafb5c9b69f0ec4f93266b6927d88444c9c9e9453cff5be9a0e61ca915b0d1b0f02d7bdaaf1daf9f5656a72cd013da67b142105a2538ee1ae845d

  • SSDEEP

    1536:t+vboaj7L+2WDgPbyTDOj+LIBe6gdiOLXFUCQ5:QjVDlJPbyTKEdiO76z5

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections