Overview

overview

10

Static

static

10

XClient2222.exe

windows7-x64

10

XClient2222.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient2222.exe

  • Size

    64KB

  • MD5

    f4516b04c354ab5532487fa4f429180c

  • SHA1

    0b930c1988c209bf04f77fe605029b9dcceea0f9

  • SHA256

    5bf327d2d6e24f476af24dbe93b733da25d9a7fad251b11aa45fdfe013a7b569

  • SHA512

    b3d59e4ddb31e9474be82f288ee74c14c06c7a9f2c32ccef43d49789d9e0b5efdfa216ccbb7776c13223e148fe9c5a2413879e6231fbce03ec7362c482f9360e

  • SSDEEP

    1536:tCjAeggfkYs03agVf5FtVRgw2yWKRybwSV5AZg3/kuLL065WnTUOQeeZK:cb1qARPVYTbbwSV5RL8UOPeZK

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

stores-achieved.gl.at.ply.gg:7001

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient2222.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections