Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    58KB

  • MD5

    8a75349ad559b9ec9ceb49c81860f5a4

  • SHA1

    212f3a1ab43c47855691a239c3c07d9aa19be4e4

  • SHA256

    3ada29041fdf724868bc3d71055a74c0fd2b5db881c5b93c3eac3806519d76b9

  • SHA512

    7428a0694f23c2157b3b4d39065dbec856ed6c482329af1fcdfec00da040885c348e2522de478ae0e6a7e9cff424c3ff310582784613425de90e546c7310ab29

  • SSDEEP

    1536:GB0pfRAjeB/ylqJI+b5VYdCF64o6GODmMq:GqOs+qK+b5VYO6jODZq

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

16.ip.gl.ply.gg:57938

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections