Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    74KB

  • MD5

    7c64e0e7e0f0a560a2bb68dae8003f39

  • SHA1

    f158e0ff6e72b834f65cffebebe09d5ae1766c71

  • SHA256

    102b8bc0cd8b73112a70524a25dd75c9cff9228012c09cb348b81d926166a122

  • SHA512

    4a936be14d4e7a2eb33118dd26fbe5d7cedcb175a27df38f717ec3ea0fee769ad7a2df7b0445c38612ae599dca5f4cc0343bd6f191b8cc02ee12329326c1ac42

  • SSDEEP

    1536:KkjgPlxkYoDVWPxOveWC3HHvb4uSUi1WcLjW6Y+4uU58ApOabYA5Z1:wEViOrmb4xRWcLZu5LOaEA5Z1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

2.tcp.eu.ngrok.io:15567

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections