Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    72KB

  • MD5

    dea22b4fa292c05c7da2b58aad6fc7c8

  • SHA1

    f51a089575ff97e8c23a94e0c482a0c648206deb

  • SHA256

    04c4c3faca190b2279461936dce8cba4ed5b17309d5cba515dcaf34081a272a5

  • SHA512

    8ccd3937cd215487d727d93632adedbdfdc3b21489df381bbb2ab10405aaf177a9a44ad8613506e77da4e266d227cabcef337481b267c60077ec6747a1b887ad

  • SSDEEP

    1536:6mtdG6UedjJs5waU/qn2jasVUE9b7A0SKGwZ6m0JR0lOJenLn+Q:6H0jiurY2jasVUE9b7b10cOJeD+Q

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

publication-glossary.gl.at.ply.gg:26114

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

  • telegram

    https://api.telegram.org/bot7704029346:AAHPre1lXQa0UfPCpOUXJZ9UXA9mFxvH4Gk/sendMessage?chat_id=7590668020

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections