Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    66KB

  • MD5

    1fd82314ea8fd5b719985d8a9c6653e2

  • SHA1

    67a4b782100e273c849d1e8e4b9734006cf36cbb

  • SHA256

    02f5148a22537f097c5b9414c69911e79b83ec285e2ba0a16b0a3152ddc08c63

  • SHA512

    daf421a3b2bceec892d11aec38578ce9cdb7f3ee9cfea679e11539cd5e857e6bd85cdebde06f42c3eadb8dd37c9f983355fd806f50f26ab7a73457fdc0c27404

  • SSDEEP

    1536:mIJXJeFUfx8aqo+O580KzIbweAYuCZ8VHN6WquOdDrsf5+:BJv9qofxKzIbwesrHdOdDrG5+

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:8080

147.185.221.16:8080

88.129.6.63:8080

31.208.113.236:8080
Attributes
  • Install_directory

    %AppData%

  • install_file

    test61.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections