Overview

overview

10

Static

static

10

XClient.exe

ubuntu-18.04-amd64

XClient.exe

debian-9-armhf

XClient.exe

debian-9-mips

XClient.exe

debian-9-mipsel

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    76KB

  • MD5

    6d03ff87e0d5aeec5f2929151a167614

  • SHA1

    aa1efada6ac7bdea21324fd70b65ad8ab82fcd9a

  • SHA256

    84ae83a2895b3ba2fafd51b19017bbcd917c94ed0422129d83aabd4382cf3749

  • SHA512

    e64b8ade34adfe9e390cc900699b5b8b75ae59f0754dd79820f1a5689e5266ec38dc95a9fa26dc02208d549142e8c8ec52ba6360306bb3cd37f5890a1ed28f10

  • SSDEEP

    1536:lKM61HtAol6asUeI9OcAi+bqPL6z+sOkLh6L0xS/U2:lKMYtdl6yeI9LAi+bqNsOF0w5

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

19.ip.gl.ply.gg:38173

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    Gorillatag client.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections