Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    197KB

  • MD5

    e29dfe9f53abec6128469f79ce8048b0

  • SHA1

    fb139a2fb47f159595246bf3998ff4672cb01223

  • SHA256

    0159f6e440369ae80cd3bc703123efc395091ce188e8ffa8ef2481f2e51590de

  • SHA512

    9612ed9ee8f63f9759e2aace2e2f538fc58189137093732c0c7ca05fc88ec8e8ba16d0009cc3da1dad16877ded16e1d8d63519052dee393cc93f9a0385eb8684

  • SSDEEP

    3072:ubJFHKGcWEbLq5ehbWiysIOJjTfBRUGKXs+S++7KFSbxeY+qDDrMP:GJFHKRWYLiIbUAfEGqStKEbxI

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

https://pastebin.com/raw/H3wFXmEi:6666

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/H3wFXmEi

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections