Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    66KB

  • MD5

    5b6d1840096a7c115a231d7d38a68090

  • SHA1

    0a560368bf1bdaaef81fdfd28f5404af29cb7362

  • SHA256

    08f25063db660d5709d349a25e15d140fce9d2dea938203a605a1a8e60cc2b31

  • SHA512

    062da15392c05ae52164675823287e9cef5ed33220c284d125898f74092affddd939562394fb13f0bca008297b231a35fdaa87e289317b4d0cc4b5294ff937ff

  • SSDEEP

    1536:am47QrYisUPpk+CSwnukgwbgTpT46YOBT9n+1:a3Idynxgwbg0OBJ+1

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

publication-glossary.gl.at.ply.gg:26117

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

  • telegram

    https://api.telegram.org/bot7704029346:AAHPre1lXQa0UfPCpOUXJZ9UXA9mFxvH4Gk/sendMessage?chat_id=7590668020

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections