Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    59KB

  • MD5

    c13097580922593e6e1d8c466fd74475

  • SHA1

    9ff8ac82ecf50e193cd991a27af46188fa3ab0fe

  • SHA256

    44340ad306cc96488fbccf923f3a6b38e137ff7a9895d9895128e7f0fc339bc0

  • SHA512

    06abbada2780305cf334c3f748b496c088a60dcde41dacefcb2fce66fdcd2727f2f0a367f981fd9025ecdeca02952b3d58b4c7d40ca200c2707a16d0bac30e5b

  • SSDEEP

    1536:gU6wmTCC0oFi2m07KyikRBkNNvNF/bDPzNcWOwFK7:2wk0Q7j9kNpNtbDx9Ow07

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

IICAcro-58060.portmap.io:58060

Attributes
  • Install_directory

    %Public%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections