Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    279KB

  • MD5

    023ead6edb029008a8d734e36e4ca475

  • SHA1

    1b6e6316d4d795896b5ccc16b870339da9b26dc3

  • SHA256

    25809e7c814825b2ad05f3660542f6c6be142b3fa90b60521f8fe158f2d645f9

  • SHA512

    9813b48c5eadd3bfab531d3d1afc107035e7a57e20a5b4be4e52d5e9f54fc4d3154c613d7199a5cc8b48c246d0d7ac75815ae6fdf0d47b84ab40122791d2a7ee

  • SSDEEP

    3072:u0Xm6sNU27b+gHOTQYJLAsNeDF5nI0PGIj9lua/Obw0hFv2PCWpId0:xmZq27bbq0sNOBTunbw0/5Wp

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.20:57676

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections