Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    336KB

  • MD5

    2124493b2d54184950c08ee9fde3e728

  • SHA1

    9ec1ca4cd694b385f334eb40e39be324db1a6ed0

  • SHA256

    14d27d31e18299aa837b70c200c79bfa1f04408bca22a34342ee2d005b9be316

  • SHA512

    6094dd23c49c1d6c1613716a069464d9e033beb58fb2bf4631307e6bb96262d18480b0f3226a334f61d8c3b18a560c39015b9e1f9b4a3267ed015198c2846a21

  • SSDEEP

    6144:RZbbOU7OQ+GIIIIIIIhIIIIIIIIIIIIIIIU:R0U6z

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    testing.exe

  • pastebin_url

    https://pastebin.com/raw/vnh6mTRX

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    Password: 111

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections