Overview

overview

10

Static

static

10

XCliet.exe

windows7-x64

10

XCliet.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XCliet.exe

  • Size

    60KB

  • MD5

    c874c8f815cf0ee3a4da14ed79ed89fe

  • SHA1

    20d13ddfd3716e58c0909a91f61ac867e97af9f2

  • SHA256

    083bb52bcc4fe191d78efaf46edb294017b86f6089fc63545706dc228ac792d8

  • SHA512

    c194d1afe98d6c03f1b63bdf23be1e78f72d792b2ce871bc5592acc901148068efcb6555373743e581c89d23ee89447f714f074ac461e8e471d80bc3745b7d43

  • SSDEEP

    1536:lJ8rfVbPwJLQb5/RYA3V6cAnMs5O6QJH:lJaBwJsb5onX5O6QJH

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

83.38.28.117:1603

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    Runtime83.38.28.117 Broker.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XCliet.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections