Overview

overview

10

Static

static

10

XClient2.exe

windows7-x64

10

XClient2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient2.exe

  • Size

    58KB

  • MD5

    704c2e8b2d15dc2fb08fc335efd7193c

  • SHA1

    8c5b3fa11ce45792e4fd4221af6393fdd094c9e2

  • SHA256

    cb55474711d325028e8dc6dbc7162105009af685c3982c35e593fe6988d6af32

  • SHA512

    4472315bb6022570c7131cf2142972435a5233f84842382e3566abb4c37653bb550561919f9bbf639bd1a7db17a059028d2b5d479a3ece106ed85b47f8190f1d

  • SSDEEP

    1536:8uQZW2ATJmcoKMLe6FsdbaA1hQb8C6YxnO+mHm:8uQZmTJmsCj6baguO+X

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

sources-alerts.gl.at.ply.gg:1999

Attributes
  • Install_directory

    %AppData%

  • install_file

    FileExplorer.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections