Overview

overview

10

Static

static

10

XClien2t.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClien2t.exe

  • Size

    39KB

  • MD5

    cb66c0aecefa400bd702fdfce6768867

  • SHA1

    86eff3a8079fac5ba6bee0c7305dcfb02bf11dff

  • SHA256

    e984d24a32bfbd3da67c941e130e6cc73efb0dbd343f549b49626fd059a84c7e

  • SHA512

    f9436c34ebfe6ea6db97eaef00d0e5c8b5196fe7e01f6c4cb3ea811c98a80b6e735de8e74bb5a2b0404f69001f1aeae160386a9bb402f4ba3da65bb7d5458831

  • SSDEEP

    768:Inp2iB3sNvzK2Awjzef/YEW7KbiCqEoFN9UeGOphFjtYGK:RiB8V6f/WlCq9FN9UvOplBK

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

https://pastebin.com/raw/s98jTNJs:1

Mutex

skS6kMhEKAoBazrr

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    msconfig.exe

  • pastebin_url

    https://pastebin.com/raw/s98jTNJs

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClien2t.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections