Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    78KB

  • MD5

    2871d75bf8825ff06487b4220fe38d0f

  • SHA1

    1b42b9558e8e230a0b2d89781753ef5bcf87ae04

  • SHA256

    abf76ca8559dc039d32e75019a80b4d6d953df8b1c313afbd9f2d4e1057036ba

  • SHA512

    c6a46a3e440135c338cbd7550da308ce7e1040664c9e999f953b68ea2f977871cdcfbac7e7b97488aef8bb22f51bce30bdee9611609f926ab2ff17ea854763b4

  • SSDEEP

    1536:6UO6A115i67fyfRK+bMCGKNqC7RCcNOh49aa0NFpETk:6USbT+bMVnCNCgOhSaRFpYk

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %AppData%

  • install_file

    svhost.exe

  • pastebin_url

    https://pastebin.com/raw/H3wFXmEi

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections