Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    60KB

  • MD5

    1c479a311dc7ee25e5f2e25800a3fabb

  • SHA1

    ba64df74fca9cec344de1b55792a69c7ad657289

  • SHA256

    64fc2ee5c3423630e1f12286e49c466442e45676b36d6d9fcfceb95a516b8c41

  • SHA512

    e78c45c3e4837591cb49234a38eda16d844784c30f529974a35dc838ff062466bb9c9fb39f5cb58ae1dc0e9194b4e740c5fa5fac80aaf41737d24151559fac40

  • SSDEEP

    1536:o6A1MRkJZ0zh40ZVnYVVkb1Esq3pFYS6BoOY/gW:i1yVhz8Vkb1Eb09oOYYW

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.21:48756

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections