Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    102KB

  • MD5

    376ed7b640dd30880e59f8f94a1df37e

  • SHA1

    af56279371086be0de6dc1c0483502c700402d68

  • SHA256

    efb422d42427c085034dfbbc8fa54a454deb62388b9306a052bf54e2824b0e23

  • SHA512

    2d28f4e4052644515190e20f4d5634e2499a853f7a82a1064d0464472bd0556aff590a3a5f2337cb9fc721f82ce406a988c587726dee64eb313c21db1b31a915

  • SSDEEP

    3072:fP3E2wpJrIbDDQOBA231mgjio+Saw9VElV:nnErIbI231mgjilbyi

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

our-sole.gl.at.ply.gg:46907

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections