Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    72KB

  • MD5

    6c46aec5e230a3c015e723371e9ed545

  • SHA1

    b9b99ef294fe844c7ccf60f238884e0d1f7b95e9

  • SHA256

    89996b25806787faccddda80c978f654d472e8b83add9f952cbd06584817d498

  • SHA512

    ebc3d9fecb922e1a6c68cc1fd0de79bd8a1aa1781a380f5e2273bd3977efb72c65bf8b62a3f4b8c931b30fdb112060bf1db7a4979a8acfbf10743d0950ea8769

  • SSDEEP

    1536:ennaej+cU2HD7hF7bdocpcdace65ez2ODhndpLPwa:KnaslFjbdoKo97OXhoa

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

printer-visa.gl.at.ply.gg:35374

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections