Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    67KB

  • MD5

    128772bf2d2e235efe53c17a09ed1548

  • SHA1

    91e722709b3c535ca5bff2af713bc3813fd57cf2

  • SHA256

    726d7aeae737ff43c3c87976096a4b8af162c49fa24f4708f93e384fb2831103

  • SHA512

    c41ae24614668304e4b2add09e1a70240a37abc43f2c5fa76619c8bc1bd3afe8aaea64aaf7b89c0135eebcec748c7204c710d85c895bbebf08363d9c086c7883

  • SSDEEP

    1536:XJgd5vY2FEWjIhcslnhtM1oxajtPAFbL7n2t2ISZ64MOBgzMQay:XQvRFVajXap4bLLk2gOBgXay

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

https://pastebin.com/raw/PG3MaVGP:123456789

Attributes
  • Install_directory

    %Temp%

  • install_file

    dllhost.exe

  • pastebin_url

    https://pastebin.com/raw/PG3MaVGP

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections