Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    40KB

  • MD5

    661388f906aebc6824108154b1574d6b

  • SHA1

    3aef312f2d3a9a2082dc8b7e9e8a5e65175eadf6

  • SHA256

    402f107fe0a588d863cc5b6822ebb9f091ad25e0fe90cbc872d3307f4e1c4957

  • SHA512

    c3cd8b48319eac2ab4953ac1941e843474c2a0486dd9ef033acb13815ff1f235dc1fb748dd4ff94b375f4bcd0603633428faf130a909920b061425610e78c870

  • SSDEEP

    768:UjiV5YeBoUT7/fTvQ5hxxaKAFWPG9Et6OOwhRQiO6d:FV5YeBN7f2KFv9Et6OOw/xOC

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

JgGRTCSGRuK6YP7K

Attributes
  • Install_directory

    %AppData%

  • install_file

    Github Update.exe

  • pastebin_url

    https://pastebin.com/raw/jGh9BUdJ

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections