Overview

overview

10

Static

static

10

XClient3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient3.exe

  • Size

    62KB

  • MD5

    1a8a14ff6f035f7e114e24b7a2dd6325

  • SHA1

    1fdd5b92adfa2f1b6e1437f71bac5df9ae013ee3

  • SHA256

    c1b0395589230615f28c2f2ad8299367bc3f5e150346beb75ed0071a36185b05

  • SHA512

    7b67a2fd33cad8e4a006abaafa5dbf07222d33bf912f02676d4d41be646fb062a6ebf778d0e4ae6711ca8aa22204b62505375b28117c0700bfddb12435329db5

  • SSDEEP

    1536:603K4tgn0jSMP86gXPTY5i4jofZbyxboCGOa40pe:6MK4tg0jU6gXPsrofZbySCGOa4Ce

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

http://localhost:3232

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections