Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    62KB

  • MD5

    5b5ce6d3c3526f309e8f30e46c9eebb7

  • SHA1

    51e9e2f0bce6d8117ee442dac46be0fa1aa72177

  • SHA256

    f2ec85f51262dd028ed2ffe0d55119e46b003d5e21ae7687fc1659afad669058

  • SHA512

    321fa435270d8f0ed5790dbcaeb5722cb9c2e6f42401f047d5281334a285a1813d61c3220156b15f5fbd2245bc72b5ea20b9aac84bf1f4b8e2e0499e14107f82

  • SSDEEP

    1536:fkoiZ9+/wtzmTK+gjYF6Tookb/2WDd5hzDmqR+wOdf4D:ZyMK+3okb/NhzDn+wOdf4D

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

has-chemistry.gl.at.ply.gg:7297

Attributes
  • Install_directory

    %AppData%

  • install_file

    seks.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections