Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    70KB

  • MD5

    9d65197d7ba6cf1edf614e2ce04aecba

  • SHA1

    77903dcb31858851195ff168fa3b2cfa02759bbe

  • SHA256

    3a6d59dd63b43240edaca116151e670328c39fe0249ba21c416d407b0edc322b

  • SHA512

    a409864c83807febc52c4d0a9cbd7a5c60d8a64540a96bb395f27ad6032fa53cdac9fa95d9f1d3853c9f53b130ba139287a8ff2654c1247ca4634e915e1db8cb

  • SSDEEP

    1536:rY55OOI9+rEXeXv6Xn2RObzYTeG4P3z6wbVLTOfz5Nx:rs5OOrONbzYiVl9OfXx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

since-searching.gl.at.ply.gg:64197

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections