Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    66KB

  • MD5

    1c8918f052ec329bc568b532057f617d

  • SHA1

    b4891dde239f01399ef990736d2fa55b581b5365

  • SHA256

    f63b1e8e8e6dfd62154c7751a33482d343e8ef2ad7c3058f9c9f393c0509e397

  • SHA512

    596959328b05c8f22d241f7e5dfc43c528ad42462dc00335c2acd642485183e5d9166251841d7dcf67d92955863e300faa35fbeef88bbe9a2e16c5c44334b624

  • SSDEEP

    1536:5pf9G6fvSRCQZfl49pZTkb6+6r9R07J67Dg5S9ukOYG:5XcCiifdkb6+8dDg5cukOYG

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

arts-below.gl.at.ply.gg:35980

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections