Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    41KB

  • MD5

    f5247334d09885397d3350e17f026d25

  • SHA1

    6da120a58893a2f57ebec91ce0e613e0039146cf

  • SHA256

    095dee93672ae769a9dfa9dd190a0a93cca63db43546856138bac16828a15f21

  • SHA512

    6ba58b64f1a9b4d69a6462eea7a632a92b3e9d435952bd3ce53749c1b416e9df8e0e0dd4e92a56dc00b059c721dfeab77279f8440d9a1e14ae796530a0bf78a5

  • SSDEEP

    768:HKr2/FPtKX7eRvIiWqyAuIzfjFSyratF5PG9sJaOwhI3ECz:Hhe7EI3RAuwxSyruFI9sAOw+lz

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

panel-slave.gl.at.ply.gg:57059

Mutex

tQOu426WKnIYDrqf

Attributes
  • Install_directory

    %AppData%

  • install_file

    $77client.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections