Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    71KB

  • MD5

    4eee730e3f4cd1e6b1f2455dbf51f5b7

  • SHA1

    c95911de37debd2e3df1c630ddeeac4968413296

  • SHA256

    5e0fbebfe54253ec36ca1b69bb380e2568de6fb650185438068b77212ad6d23e

  • SHA512

    7caf0d07acc752c16c29d77c4ae0c67163367435ec7fe6109ed1561f4c2320c9a54449e911d48d627606c822108fbe48b4193201adee5137015837359e1768f4

  • SSDEEP

    1536:eV/fyQp7uAxurpTNgbRaKgjtqK6B64iS5O2x571t:eV/d7hot2bYDDlS5O2x3t

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.23:38042

Attributes
  • Install_directory

    %AppData%

  • install_file

    SystemUser32.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections