Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

XClient.exe

windows7-x64

XClient.exe

windows10-1703-x64

XClient.exe

windows10-2004-x64

XClient.exe

windows11-21h2-x64

XClient.exe

android-10-x64

XClient.exe

android-10-x64

XClient.exe

android-11-x64

XClient.exe

android-13-x64

XClient.exe

android-9-x86

XClient.exe

macos-10.15-amd64

4

XClient.exe

macos-10.15-amd64

1

XClient.exe

ubuntu-22.04-amd64

XClient.exe

debian-12-armhf

XClient.exe

debian-12-mipsel

XClient.exe

debian-9-armhf

XClient.exe

debian-9-mips

XClient.exe

debian-9-mipsel

XClient.exe

ubuntu-18.04-amd64

XClient.exe

ubuntu-20.04-amd64

XClient.exe

ubuntu-22.04-amd64

XClient.exe

ubuntu-24.04-amd64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.rar

  • Size

    47KB

  • MD5

    3e927f3cf005e86563edd2f8b9a010a7

  • SHA1

    d3298614438c234c90cf4d979ea166211dd32e6f

  • SHA256

    baa8ace81d5e51f20fea99bf6b8de26c594a2011b670883304e085e5a9847eb2

  • SHA512

    a12f9f63aeefd7b46a28bba0d9266ae57ea8e1a1a1dd24ed00125d3d31d6c8e93fc448c183d5bc7c49b617e577c611bfa38ee7527f2584bfe5d4273b3e056558

  • SSDEEP

    768:KJqOIafzF7rapluoLB4bkKxOxUR+ezEuauHG+YUqYm074Idsvv7L/jBhl+6NDNz8:XLaR7WbuoLQk1evrmIzm0EICvvRBbz8

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

full-self.gl.at.ply.gg:45212

Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.rar
    .rar

    Password: 1111

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1111

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections