Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    283KB

  • MD5

    0bcebb872e31fda3fd490031b95c5ac1

  • SHA1

    54038fa6cae80425b26ae87a47de595e8e826e55

  • SHA256

    20ca33dcd8f23ab368c94479e1d7a245374565f9595a91506a56aaa1391d02c2

  • SHA512

    95cd4af913c1eb08b6971afbbdbc164ad11cec544fbd15d629e1e3c8c298716ce0853ae9ffc781e2ccb430751dc889621bcfa30a0b470c4a03b1e6f41377d9cc

  • SSDEEP

    3072:zaR7wp0ggKvI4bNcakX5RYObPbcNkaiRnwuo2P:zRgKA4bHK2liRn

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

176.190.235.221:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections