Overview

overview

10

Static

static

10

bXClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bXClient.exe

  • Size

    42KB

  • MD5

    1197a13638ec84ea69c38d0a789a66a2

  • SHA1

    fc65c04ec53a09606c15055a7edc4a083190a418

  • SHA256

    12983048e2e21778b6db353a833f6ecd6a9745c2818d0968f9c882b1806681c1

  • SHA512

    12f62b6cea4f6346129d6c589d557d1481e43e749ebbd5d264ac925140da4b277560d4d75453a58847ad651562b5b230cd0650e968461a0f360054ec58b89fe5

  • SSDEEP

    768:g/CsBpA2DYSPd6ls3AyZrl2F59g8qZOCh60R8lE9:g/C2d40wF59g8qZOCU1E9

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

https://pastebin.com/raw/0Pj9kgRk:1

Mutex

ZywUmpapVFNqLmrC

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    msconfig.exe

  • pastebin_url

    https://pastebin.com/raw/0Pj9kgRk

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bXClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections