Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    139KB

  • MD5

    7236c15c27e7e63a179e4fc935e2aaf7

  • SHA1

    2eb5ac67a7942a2b7b9a64942b4c621367f61881

  • SHA256

    e4f859e199ed7f9933f7da654947cf04ec6c91367d53f6f0fc31f8b1872ac9a0

  • SHA512

    845b9a6abbc9e4d5fb2121a7f1ccac892557d7c2fa57752226264e268254483a0b4184e3f0398c0fc22a009b81b9e7cdf6071146ab18afd563eabb13dabfde7f

  • SSDEEP

    3072:fjDwenZOEK0FpF49AROwVM+lmsolAIrRuw+mqv9j1MWLQI:f4+t/Ff49d+lDAA

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

should-nutritional.gl.at.ply.gg:22817

Mutex

q0vjMgzmZTmKaa3q

Attributes
  • Install_directory

    %Temp%

  • install_file

    svchost.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections