Overview

overview

10

Static

static

10

XClient2.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient2.exe

  • Size

    39KB

  • MD5

    9cddd620e2e8cfb4ffa8c782017da014

  • SHA1

    f185bf502dbd4e8cc3caccf79759d9d63f1dd3e5

  • SHA256

    92804c55d65a222305f874ec87644224d6c5aaf328df8d38177d50b31df35873

  • SHA512

    41e99f2bebf310a07c314e46441a0a0d586d6e932ec787534433ad823a93ec15597a757c9ea88a8d8562f52ddf09bca7fd7c1e14c3d1317d8758e5fc18b2b73c

  • SSDEEP

    768:kH9oHm8G6YPMqVBjJfDUwtRFH9OK66BOMhDL01jt:kqHA6Y0kBjJfIwDFH9366BOMpsjt

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

growth-planning.gl.at.ply.gg:48210

Mutex

sTYXOeV7Qs6pRHBc

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    XClient.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections