Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    36KB

  • MD5

    2ae901a259c3da981418354a1cff58d2

  • SHA1

    52682a2ca7d4f838f1e5f3b464c62d5750cb030c

  • SHA256

    ecd00848f1bccf49e1b7b9d74ca6b63c6f1055fa6d7693eec00b11b087965f9c

  • SHA512

    a3734e0dc59bce69297addfaeeea3a6e4d51688a36de7ab9fcef97a6b3cac63d009b0e12493cb07d7a8bead1b2c7a69465fe37229ec8a431f8715bae84be16b5

  • SSDEEP

    768:XpBGTV/leINMMEzYx4hYoPgiLFyw9fHOjhpPS49:OT9leINLuBuoPvFF9fHOjz19

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

test.vi:8812

Mutex

ptkonjOTlrFWNiq2

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections