Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    161KB

  • MD5

    e3575ceb1c911c4e6fc4c44d294ed208

  • SHA1

    a9d4d40e6cf766d5f1ddc911c5e2d828e64f72c2

  • SHA256

    528ee2c611e247cec7cf2793f2ac1fbb92d4df607aaecdf7563911f408d75865

  • SHA512

    3d28e9d7392ff1899c8d483b4d4250699def9f280e76bb47ef7b60475b4f25b456bd5e3e5600ed88200067b794daac49e12b55c1caff3ef01f5a475d814e5f15

  • SSDEEP

    3072:U43KD+blX3kmOi1SuBz65/M6If+3Js+3JFkKeTna:U43xbdiuxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

20.ip.gl.ply.gg:4219

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections