Overview

overview

10

Static

static

10

XClient2.exe

windows10-2004-x64

10

XClient2.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient2.exe

  • Size

    82KB

  • MD5

    04bfb56e7cfe27e2fb1dc4be72b705f5

  • SHA1

    324e46eb02a4561536d9f5775e84592b85fd0f22

  • SHA256

    6b0c02766fe5cce2ba045b22a4d22e1be715f36de87bcf37aef6819c9c2acc6d

  • SHA512

    c80df99774f899f48b0150a32b86ba7c60337c99bbe6f60f57c8a7963fb50ce7c2259dd171353257abe21bce94e2ed33b2860ba60e0cc677519defc4e08e2015

  • SSDEEP

    1536:cajDKkkG+Ng/rhqNGqdQAbmnGTDxE6S+Fj1ypOFEgLAMB/ddK:Rd1+ejloQAbmGTtypOKuBDK

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:48534

localhost:48534

domain-vote.gl.at.ply.gg:48534
Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections