General

  • Target

    XClient.exe

  • Size

    78KB

  • MD5

    0d5a06fb36fc3ec5d1cf09d0d98a325f

  • SHA1

    b6ecffeaf89e8537ef50d140e237c2438be6d9ec

  • SHA256

    cefc2905829d0f361e498347cbacea9dc5d51eebe0d0d9f531aa167101334552

  • SHA512

    1676b5aef4e76cbe2cab0f321df3a92a5629e310d292c4a51b52588bd9f9203cc0ef4cfe40741273f20967c542de4fbd8c234dd7bc5beb56699712b05bdd7b58

  • SSDEEP

    1536:w6Yk0SRr3dvpcymipq3DgXxOyz+b6jH8/zlnNpuh6f0nOR/K/SERL8K0V0:w6Yk0SRU1nTgX0yz+b6jH81z8OR/KHec

Score
10/10

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    wintousb.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.