Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    143KB

  • MD5

    f2413cdfd2bd6e345297435558c502f1

  • SHA1

    1455e52885e485f001e2df34364f2114d52629ec

  • SHA256

    f601478fbfa05609be8bfdc5e0a4b418f81a0a8000b1f6112f21bf94cf9ff632

  • SHA512

    bb09b2ff2be995d5e6cefc9af865014801165e73be1a432fd773a2198e65107b50c5ab5f1103acd742b8eebace175541f0885e7fd23a932af4c9cf105f5ad3ff

  • SSDEEP

    1536:6Q8zb/cdST38hmk0FGIm8b2zUUer276/lqjO3H9jCnqmyVttdGFQeOPigc:jQohhmDFGB8b2zLeKMIO3HknqmyBer

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

https://pastebin.com/raw/dUeg9RXC:123456789

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/dUeg9RXC

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections