Overview

overview

10

Static

static

10

XCliente.exe

windows7-x64

10

XCliente.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XCliente.exe

  • Size

    36KB

  • MD5

    395215a22a267cf199521a61c7f2b534

  • SHA1

    29fc83d750b4c511ad3eb6b2c1385af59bea3f1a

  • SHA256

    dfb7f574140d6ef948e3fbd8635522be13c54ab4734c8d981a1a32bb98adf17c

  • SHA512

    28db962c4f21526f481b145754e7c78461c57e67ec82d54c1535a44b5c3172e0403fa989a79e03703a6cc5ae9c5bdb264730a6e9635142ac3beb2b0a54058844

  • SSDEEP

    768:ckXVpgY4Xyc6oFoBwULMYzFB9l1TOjhVE/C8frB:caVpgniEFmHQiFB9l9Oj4K8TB

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:1234

192.168.56.1:1234
Mutex

Zcsun2onymKlhi5k

Attributes
  • Install_directory

    %Temp%

  • install_file

    Windows Defender.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XCliente.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections