Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    72KB

  • MD5

    d7ccdbea7d2dc454c33386ac11352a12

  • SHA1

    0df56c6d38daeacccb17ee5c95d2e05b8936b040

  • SHA256

    3fe533ac8c748603d101ebc8a5fe84167bc53476f3cbb2da5c8a8a3f9220ecb5

  • SHA512

    0af41ba35882b6f52d30826986f97c6ceeef4af3770749707c2db48dd3025813071b34eec63fd0941221a7bc9f08ecf2a1ee697d637d9df5f056f71996bb1dfc

  • SSDEEP

    1536:S3gJkh/bKY7HHbzd9XCIY5bQF5RgjceR6nqQOIXPFb6G:Szbd9XUbQpg3WOCFbt

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections