Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    68KB

  • MD5

    c823789a50793ee80a45ab359fddfcfc

  • SHA1

    699fd120d8609fcd5557cc60edca9fdbbe099a76

  • SHA256

    2cc6bdc3c5a4529b368cca51ab6b3581ebd69e4e0d35c20b820cd16290ee2b53

  • SHA512

    f6bfd34458f1e4ecdd2f94f7bf246e84ec85bbe9c1bebe78c7b041de0d208cdc1feb30466502e37f2aa0371ed92798df6bbbb111fcd5bfa98778b692c68d1e23

  • SSDEEP

    1536:tmo4cC6AKUIbEiIieD7svzwchVbrpYs6KzOpEB7A1YGqM:145x+NjvzwcLb9VzOpENJLM

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7777

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections