Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    71KB

  • MD5

    c714ce116161ffa8fe2ffc7ee408f713

  • SHA1

    1b0819d6f5e3dd40373e53ad682f07b8aa19245a

  • SHA256

    1c67718222ae0d3f40781776f8905d56a918ffa47df677981bf6bd8a678816e2

  • SHA512

    f4d9e87f102cc300d2454148cb515786844f770cfb4054a62c057d091f1e461c4f2840b76938dd5fda370103b951971565fbc9ce1177ebed9a2661a1e0636385

  • SSDEEP

    1536:q3jU+WqYYbcd5QBLknayL3jk0W4b1xLRJ2/6EdNz6OD7+y:qw+13cd0InRTDb1hAd8ODKy

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

keep-motors.gl.at.ply.gg:2646

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections