Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    70KB

  • MD5

    2c4f27bb9e37069cc1d26a24b43aa0dc

  • SHA1

    6df0d1c95a1b29fdf3a5f00b904112e0d38cfc55

  • SHA256

    67482ff008692319041df3cbe880eb936aec870900fc930273504a5c91364315

  • SHA512

    d2b73e7f7a3b592e2d3300c4ade2e55790ee9a1305426b8e41519aea6cd06679d155a1b0ae1c2f6845c59677ad815d5725f0109f9c2c87702b5c7f48626cfd89

  • SSDEEP

    1536:tPIRN1tiOXVXOu0unGIbysv8bBDhF2M6XymIWOmJFSnUu:pMRXVXR0wGIbydtSvXOs0x

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

19.ip.gl.ply.gg:38173

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    Gorillatag client.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections