Overview

overview

10

Static

static

10

Xerclient.exe

windows7-x64

10

Xerclient.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    Xerclient.exe

  • Size

    237KB

  • MD5

    536c9e1f2c5faf02f57fc90e2ad26aed

  • SHA1

    91dfa1a6a46742eeba1c617b14570c2ddf4c00da

  • SHA256

    408f0646b172e4afc15e7879aeb8d7c2748e6dc1490325a9f99a42c9e18a728b

  • SHA512

    1c0d7bae9cb55e20208144c878909a6d6ff4a1c0d6e9fa44489ebe8541a4592961405b10a2a76ee316fd8db98f1efcda6a7d657379920e55a4248d47aa45b40e

  • SSDEEP

    6144:M8nHMbhWStaUhcX7elbKTua9bfF/H9d9n:MqsWSta3X3u+

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

4.tcp.eu.ngrok.io:10819

Attributes
  • Install_directory

    %AppData%

  • install_file

    svhost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xerclient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections