Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    68KB

  • MD5

    07cc510be5e42461054d548811012a4d

  • SHA1

    3bb3a153df9ba31d33bcd868e58721cc97274631

  • SHA256

    214480b4308b035c2bc256193f82cbe5bac2a508df86437f30a93a56fb391042

  • SHA512

    3b18377311c8fed9d74438662193e8025cf5832531dd9678ceb5f880170744f3d12a6abb98efd3b3c0015802b96ebda0d6db36ffa70c98ed32ad5e89975452d5

  • SSDEEP

    1536:bZL05kONehcSKMYzs9L0bhavMDs6gdD7ObNGgu1kd3:lSk2ehcBqL0bhwfJOb7Rd3

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

http://localhost:3434

Attributes
  • Install_directory

    %Temp%

  • install_file

    silenceV2.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections