Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    66KB

  • MD5

    bbff181060e31ee112d32ef5a5cb1648

  • SHA1

    59d69499132ed3f07569e10e8685431206bbe685

  • SHA256

    1ab506bce83eb3b12674542c3fd1429805e4b5a1ae3aff6fe60bbe0888b68f94

  • SHA512

    4a49720b9fc2bdf47c009103a8ab0a1458c9c39a1cda0753fd0bd1d957311d996b43aa4765b12bd60c3185f3ff291fa514743c42b7ebe7a63dfe606f61227ffc

  • SSDEEP

    1536:7vhvEbWkP+pI+vrcP/aovb5tHJH6fROSBB57:7aZMI+vrq/vvb5DMROSBB57

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

31.208.113.236:8080

147.185.221.16:8080

127.0.0.1:8080
Attributes
  • Install_directory

    %AppData%

  • install_file

    test61.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections