General

  • Target

    XClient.exe

  • Size

    213KB

  • MD5

    6eeffbdfff03eaf00d7483db6c348666

  • SHA1

    93df850aafc9fb45ea9e70344d1217eba9ebf818

  • SHA256

    585b6191950d5f3bdc1ab3cc841c04d5971bedaaac8c27d5d148ab4d8c9ad222

  • SHA512

    036f31b955e0bad4e783ee1c872dbd5478960b6448f6f8ef72a3d68cc2c33d6405e51c659273bbe79faf0a979240fe362f2c8faa2c765abfe6373daa047dbc4c

  • SSDEEP

    3072:mRIPxR1ES+rF1E0Mpe1s0N01+0mI4OWKWzVDFzbm7RZbmNW5ZenrqOT1+fPOF8O5:mYES+rgp8NQMbzbmlZbh5Zen2OTc+O

Score
10/10

Malware Config

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections