Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    66KB

  • MD5

    c3098b3652ff771ea66b33e8cd00c788

  • SHA1

    07701a36e3ff0070903e6037c9b7dae44b26ed94

  • SHA256

    dbffe0a416e71df0ffa3045dc0d13bcde6ea6762c4a40edc731e5622313295a8

  • SHA512

    93de3f89923fe4bf942fbfafea33b75b97a8599ca1c2df1dacc7f7d7fd3762f9d66cbfadb88a1d1859066d09d3f8defef60bf003ead76fccff37b9e0316570bb

  • SSDEEP

    1536:8WIKUQYTAHbLPgWXPkblluQNuqjuBPeln6LFZOxmXJr:8mUQYTOjfkbllsBPJFZOxmXJr

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

83.38.28.117:1603

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    Runtime83.38.28.117 Broker.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections