Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    46KB

  • MD5

    997cf7620331199fcb7e3a2a90019514

  • SHA1

    9248c92463f26bf504c50d34aa8969e34c913167

  • SHA256

    070ca53cb9d8d21753aa9dcc25e76c941e3894665731c9ba16b114ace647bb4b

  • SHA512

    ba0822b1c72618311e1ce234861cdf4357a67fb95d240a1d7183d5ced524114a1a0968e89bcdff825a93f688e5f1d66932d68e169845c22e8f3b1836b4846339

  • SSDEEP

    768:g3Pt/pS7jfx0CLn7cef+UqVJ4WaJihGWbQHKA4B6CT5K9JchiqnE7NLrCc4VO:g3Fhqj50CLn7ceWJVHbQHKz6CA9O8t7V

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

  • pastebin_url

    https://pastebin.com/raw/Jt9Xgc6v

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections