Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    73KB

  • MD5

    659d9f2d124e0c1c12662aa898618df7

  • SHA1

    bdd38e17b9b09dcf0af8e2fb6fc1a812ce4bf2a9

  • SHA256

    a679484be92430110e30ba1e57930be32dd3fd702726f6d128f0b0d91c036e63

  • SHA512

    71f2b2dbdf37fbd21981ceb01652e0f3ab8b68d7cf591b18c377b1938cc48ae0f29f512145559646da0a928b9d0f246e37f8164c7fb5b4ea71d8680bfcef1c35

  • SSDEEP

    1536:JgFKy86wA9HpqRM7P6pIDHcZlbOc9VgHX6uh6JMOS+UpU3g:uFKJM9+MjkIDHcDbOrXvOSB+g

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

continue-silk.gl.at.ply.gg:58347

127.0.0.1:58347
Attributes
  • Install_directory

    %AppData%

  • install_file

    steamwebhelper.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections