Overview

overview

10

Static

static

10

XClient.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    174KB

  • MD5

    8df6a0d67de286bef456b0356a789a1b

  • SHA1

    85b4c2be7a0757e826b336b5b116cc77f51e1c11

  • SHA256

    62de8e9d8356c9f4ffe699f49b46b87f604c9e705bca06bf589d9d3a615876c8

  • SHA512

    c6473d07ccc5e904ea738ef76a6a95eaa3335813bdedd78b6395f21958db55375a3cdf19e1b4ec235d9cf391f45dede9ef16e11ab49d9bf3b9aea906064714e1

  • SSDEEP

    3072:fdCUlJRbpm8TOaO16JGnBz65/M6If+3Js+3JFkKeTno:fdRl/bpdOoJGnxBt25

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

request-rapidly.gl.at.ply.gg:56303

Attributes
  • Install_directory

    %AppData%

  • install_file

    DELETE THIS NOW.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections