Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    58KB

  • MD5

    38a7d3c578a960bd1d045717b822752f

  • SHA1

    caffbb50a591cbf368f9ff1fcdf5134cf60b12c7

  • SHA256

    cc9ebcf65f91040511bd9efa28882aec14b24f2d11aa9f789b60e01a01b913e3

  • SHA512

    e1ac98df06407b500b21db82b045a890d6baba4c6db77603aa7598a7e2352e1cc16140ff332030bd1555e4c96e2eab630d546eed62d4e33769dc2fd91bea51ac

  • SSDEEP

    1536:6Q63vkCG69uWT6tSgGOd1bzsIoV7D6zOSYGZW:SjTM7G8bzsHVeOSNZW

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

engineering-thoroughly.gl.at.ply.gg:30205

london-components.gl.at.ply.gg:30205
Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections