Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    95KB

  • MD5

    071cf7d1a3b3813ea79baf6dcc9df26c

  • SHA1

    93b336eae6193a3c35ca2a91b451b37430cfdb90

  • SHA256

    4287b8cfc87f098d281e977c7c2808249dabc0b6b70826644ab8c1b3bab2f339

  • SHA512

    da23f64517eb76e4a8dd353f3af2417a799b5831d42da329d4e5e5ed75c0b283eebeb4b0e94142aa8ecd4e422b3267df8cd8275ee046c0fe60806b5ebdf1b5d4

  • SSDEEP

    1536:CvjzHDQ0fPCB4d7rwh4m3boGuElh6mDO425MPkZb48nZYc6fFyo+O13y0FT4DRuK:CLSBQS3boMO425hbpmcC80FTOj

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

94.156.248.32:6543

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections