Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    190KB

  • MD5

    21b9f390aaf842a38dd8a27a5c67e718

  • SHA1

    9dcafda9fc56dd0ec3d7f8392228404c39b614e0

  • SHA256

    ec96de99b5257e59878490164db618607f01b7791e9cd0feedd5352c5070f7cb

  • SHA512

    050ebc9734320f843ef650e2d55e6ae2cae8bfe80dd341fe0378166628ede8161e42de478aac8f044399ab19fda23be1f08fa53eb1ae019ba7f9282b8ff6b412

  • SSDEEP

    3072:z79Ml4Z0+bBHsTOg4UCRUGKXs+S++7KFSbxeY+qDDrMP:/3bpstGqStKEbxI

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

https://pastebin.com/raw/H3wFXmEi:6666

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/H3wFXmEi

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections