Overview

overview

10

Static

static

10

XClient.exe

ubuntu-22.04-amd64

XClient.exe

debian-12-armhf

XClient.exe

ubuntu-24.04-amd64

Resubmissions

09/07/2024, 10:49

240709-mwt8ssscpe 10

09/07/2024, 10:48

240709-mv6kfascla 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    69KB

  • MD5

    18f5b258c6d5017524c5a8b4cfc2e394

  • SHA1

    215f5505491fb17c0db19869bda3c837ad716df1

  • SHA256

    82dab3cc3ebee63a9844490198e3d3afdaf809dd5e02e34ef9f2ce798783d4d7

  • SHA512

    90c4c97617f9300c140bdc1cbf3bc79073f9364a976d317ba063f930905025495a38f5187b2bcbf8f0b94fc3ab359d28fce199f5c918411d3560c43b9f43be7b

  • SSDEEP

    1536:821MhYxP+Hu0lOXBsn2bJrtJ5kFFJvy6k4YbFFTOuDTcd:n+6nw2bJGFfYhbFFTOuDTcd

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:41896

20.ip.gl.ply.gg:41896
Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections