General

  • Target

    XClient.exe

  • Size

    52KB

  • MD5

    827024c5afcbcf70960c03f7e8ae40c9

  • SHA1

    9b0e2f758088092bfa82dcd7b57485f5ed37a305

  • SHA256

    db740845858128aecf3c8adcb05566fc99e1e56aaa8c1c2191869b9a652b012f

  • SHA512

    7ac93a4939464e8c9893173e8cc566c62420557b5128491e33607ed6d9ba851b8a83722e5ac542914c1a9a26287e9f7caf5bc5b3b831a97f5c62511e1db51718

  • SSDEEP

    1536:g4WWC5D3vRUdXD0VC8ObZa9aQG+77L1OiZ8:gZ5qOVC8ObZgJ7L1Oi6

Score
10/10

Malware Config

Extracted

Family

xworm

C2

download-relates.gl.at.ply.gg:4489

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections