Overview

overview

10

Static

static

10

XCsssslient.exe

windows7-x64

10

XCsssslient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XCsssslient.exe

  • Size

    85KB

  • MD5

    0bdc10075591678b2834a183599e1934

  • SHA1

    51ee9be786746c2462595e0fdb3d6629f1fbdba5

  • SHA256

    770def897a3e3ea3e8f5fdc26d07e50e52b8c9aac18ce5372baf07696e98835c

  • SHA512

    6782d0aba2329edaad1b243bd9da2c77404e19371777146c1ac6c143cb5215dfa4255548eab5cb73429fcbb6bd09ffc2fd0aba0d258c441fe4fada6c4d701ab1

  • SSDEEP

    1536:57MroSi7DFpFRuF2BaJ4fzx9I6KbV/H5ikBX6UtPxOdbmYKjL:5AeFpYuaGfd9I7bV/HJtpOdbmNL

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:53435

10.127.1.38:53435
Attributes
  • Install_directory

    %ProgramData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XCsssslient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections