Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    57KB

  • MD5

    27bb905c590e1ca57930019d3587801b

  • SHA1

    952e5b9a51b4e14d5b05bd8c79bc856cfd1798e8

  • SHA256

    1deef2c92f4d52e4f52164a6e3709543a155327a7ef4d51fe008a7f058e578ca

  • SHA512

    91393c6cbcf9385e6130d1f82c2a8aabcd6ff7292081f1ee63c0b237fbafecd284799c705efe48724bb6965971a2a38e99fab89711b9ed69968fed233f7f8e56

  • SSDEEP

    768:1L6touM9WQVzWfVsWUnPDpbongkbPPY89Wa94ogh5bjh/EgnOh/hA/F8Etr:FGKifK/PFzkbPPYGP94oYhDOBi/Xr

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:56069

front-applications.gl.at.ply.gg:56069
Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections