Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    341KB

  • MD5

    73f130e023b6bf91ab2c484e45a983d4

  • SHA1

    65a5d79aaf37fe8cc27ef53dc07f6354f0412d69

  • SHA256

    67842e9160df1a254a6ced45441df9e7964cc7058cf4a6453f6e497db0a8119b

  • SHA512

    26cd48a08653ca54832bdad00edbf3de1ee8f294af9e39020ffdc5a767c7737fd4e3e12ed26ed025f295996856ce9d83647ea91db5cc0c77fc2341b5336d395a

  • SSDEEP

    1536:/c7gzDbouG81mVQeUngYriXbbDlfTDKL6COgk1oVaGuqtadlUtkkN:/CgzcrZXbbZPKnOgUowGuqyly

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

own-velocity.gl.at.ply.gg:62400

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections