Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    181KB

  • MD5

    54be25948cde668a9f0a31efbea79238

  • SHA1

    e00cd0d4865b2fc3805803c1c5450d07907b3aec

  • SHA256

    33a182216fc7373b3a6bd7f0072d2be15dda0be8d87ab7cdb5efd059814a0bf6

  • SHA512

    6813b95fc6736d12bd070afadd4db12bdde00f54423315ba21f2522f5893d095f41930509a5b91b20ee3f74af5ff39598b2ec87cad4439745a15ddba30a477bb

  • SSDEEP

    3072:axyAX+bsg/AfwIOdNMf8+4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvp:yub/4aB+gVqwlL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

  • pastebin_url

    https://pastebin.com/raw/Xei4S8Yz

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections