Overview

overview

10

Static

static

10

XClient123132qwe.exe

windows7-x64

10

XClient123132qwe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient123132qwe.exe

  • Size

    83KB

  • MD5

    c3b823bb12da627aeaa467f4d149ee8e

  • SHA1

    8c18b14bbb0dda90bef24265d6e352da4b8f0f3d

  • SHA256

    0e9a5c826a394a1297e1fbde5c942451548237f66ac79c043161b311a1a2d816

  • SHA512

    97bb06127cc30068ef3026d42d1d6f665ac00ca4f099da718e6fb7a66af611fc1b9b2321347d3d4b79bbb80dd06c2ddfb4bee65691b371f647ee04de36214399

  • SSDEEP

    1536:tuLygevvF+ctvAGJQBbEpqxomp6KA4OJvgz5mZsGg:pV+ctIGmBbER2fOJYdm6Gg

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

silver-bowl.gl.at.ply.gg:29206

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient123132qwe.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections