Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    182KB

  • MD5

    bac416bb649c4dee72bdc629cdf590aa

  • SHA1

    9441ea77ee2834a1bccfbf81b5e00b108c0f5d5a

  • SHA256

    39bd08425f327a4daaa42c9f487c9400aa0a0d5751702816b1b0a973651cb75d

  • SHA512

    92e76ad9618442fdf332eaec2455085c51762ce8bb0243f51007f68047f6de3adcfa79177901bb80557a8b259228701268d30b3ab210b4a569674a28a8b17a28

  • SSDEEP

    3072:b3M5PDzCtUCpDBbk3yF9mguDM/O9THyaBz65/M6If+3Js+3JFkKeTno:jMB/CtDpDBbF9maZaxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

phone-montreal.gl.at.ply.gg:50013

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections