Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    54KB

  • MD5

    f54070cb3f8967ad80f93d00a02a52ea

  • SHA1

    ddef9179a43fd625d5c3f04c8f1919379de7e480

  • SHA256

    eb8db18db280b1d68aa5aaa05d4d6f4bdfcf9921609d2c80915f8db2bb386a0e

  • SHA512

    a605105bec3ccc2d6cb204c5ef27247653abc41ff1ef5bc5e739e19dc7308f33f136c338c94683f2cd8d97458e63298dd98b36571bde261862e2a301755a8f7d

  • SSDEEP

    1536:om+BiZLw0HucpDIKBqCVzbiucbq0LSgZ6+LG8Or/1wB:keLicpEdQzbiur0LhS8OreB

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

147.185.221.23:53631

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections