Overview

overview

10

Static

static

10

XClientRAW.exe

windows7-x64

10

XClientRAW.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClientRAW.exe

  • Size

    75KB

  • MD5

    8901222e32955d6a0b3726cd5df36d7d

  • SHA1

    b7bc55849ec918a7cc2b3d95c1f3bcbeef3bd940

  • SHA256

    93499d87ab6ac4928d012b452b28433064cd554a5b11f74a615811def521b8aa

  • SHA512

    152a18e989ef822f65631eb273deabc19affcc377aa64e18cec51ca1e6869e940c003534deb7b047e22e7d43e9993b295ff229255d6a28ed2ac514a31f36cf7c

  • SSDEEP

    1536:RM5at9jdDNbjPXtbgoG0anpMaf6/wQ1wO/MxK/6:RMyHp1bgR01OawO/Mo6

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Attributes
  • Install_directory

    %Temp%

  • install_file

    svchost.exe

  • telegram

    https://api.telegram.org/bot7414557379:AAHJMIrSP_hoR0jelLf8igel3SZxGY860qU/sendMessage?chat_id=2076906822

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClientRAW.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections