Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    68KB

  • MD5

    68604d1b2200493d620fbb9e70c3b182

  • SHA1

    dbffc3b9a4935f31120bd623849175c3072f748e

  • SHA256

    34e19eff1a2abfbcec9af157d91af7c502ec0f5cce0b58bb49b7a4c7a23d6f45

  • SHA512

    1f3f15895dc2b9ac282554d99ea7a7daa44ecd7c0c655c84851200c95b51e1a4688b4690f94a75343b1cbfa838f1aa3e975f4da329782e71436a9a8000d4e19d

  • SSDEEP

    1536:6RgdNcKAE/LQXYd4AnLv5DKA7VHg4kbzmWZf/kxTYSbFcAzOthYV:6wyoEXW4alxBkbzVapFbFrzOtCV

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:57562

kind-lap.gl.at.ply.gg:57562
Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections