Overview

overview

10

Static

static

10

XSSClient.exe

windows10-2004-x64

10

XSSClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XSSClient.exe

  • Size

    181KB

  • MD5

    145bf0decae9e6d42c3f0d1be75681ea

  • SHA1

    d6750fadd530006ae2e19b43030e75a960da2354

  • SHA256

    f51c09afa2a8cadb1b08efdd532e299c51ee585c5feffb4455472c2041bd97a0

  • SHA512

    494e7fd17198222efa69e929c1bd7346461349b634651a8aa9ff90cb3561e5e3b3fa28dfed6be70f34b7b0929769dc73e050fba74f9f20f77d1c9d460a04c33c

  • SSDEEP

    1536:ZhibIFkdQL2MR9kbubnNpg68nSOnLOCbE/6llpysa7iAM4:Pmjg2MdbnP+n1nLOCbE/MlpYuAv

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

7.tcp.eu.ngrok.io:15249

Attributes
  • Install_directory

    %AppData%

  • install_file

    XSSClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XSSClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections