Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    75KB

  • MD5

    771ff41d2a0ee93b10ddb2cb40979286

  • SHA1

    0bbc58b91b443d95924a80338d0f17a79e6b44e3

  • SHA256

    328808df0924143f361b86eaa3a383bf336187b65c98e816862eea1b31e02562

  • SHA512

    81c5d3cda2ab87eb850496321527664eced08836714bd8c2d8d94d6a5cf18daf01d01531e022fa91afbe72292c82d2a0115b7a5302186d32d4376458e7f0740c

  • SSDEEP

    1536:/Pj6wmlGhaIqerU7YaYbe4zKSh/8t6qJGO/ID8X:/P773f2YbemKSp8pgO/IAX

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

http://localhost:3232

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections