Overview

overview

10

Static

static

10

XClient (1).exe

windows7-x64

10

XClient (1).exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient (1).exe

  • Size

    81KB

  • MD5

    2246bf16917b0702320f64a3180cb3d4

  • SHA1

    39355ab71912a503630371734efb6d82ba94c271

  • SHA256

    3ccc1d196c8b4bc081ead3d424c93ebffcff8364fb82528188cb19b9e27efc01

  • SHA512

    f56dceaac944a5475c7870353e2bf28cbd3eb2da74a2738a41a754ead03731ac69da3ea6de152ec4fb746d4b65ded7f37f82eb5e1c36b87c65aec46f6191fa30

  • SSDEEP

    1536:vwam2uOYuOyYAPv6W6uybFE3SqHX8cNOzndFEt1o:vbGOYuOyV6uybFE3SEzNOpFEzo

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

https://experience-string.gl.at.ply.gg/:1604

Attributes
  • Install_directory

    %AppData%

  • install_file

    Carlos.exe

  • telegram

    https://api.telegram.org/bot7064179452:AAGRvoR6qc3nwRAjChFAhXvQJfoN988JzHo/sendMessage?chat_id=6380503903

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient (1).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections