Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    63KB

  • MD5

    6521174597b7e6f5b68650f5787320c4

  • SHA1

    e81bb4b0fe27d051cdb5b0efc268478cf3ed6816

  • SHA256

    c8b6f5fe23219bc89cc6da63c4bc92b7aaf52e803b752ac4eec3c3c535db1c8a

  • SHA512

    b20a8e98098dcd9c50f241826662a9809c01811210e16ae1ee87d806b3b8e9d502a919a2b8c8af5e7511b084c9c9fe8392e1094a5bfd25e63c4034e53353e6d7

  • SSDEEP

    1536:0iID+fkiRhKawZ+bgVktRygo6H6O8h7DqPK0Z:0iIsPKhZ+bQAB6O89an

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • install_file

    wintousb.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections