Overview

overview

10

Static

static

10

XClient (1).exe

windows11-21h2-x64

10

XClient (1).exe

windows7-x64

10

XClient (1).exe

windows10-2004-x64

10

XClient (1).exe

windows10-ltsc 2021-x64

10

XClient (1).exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient (1).exe

  • Size

    41KB

  • MD5

    8ac12cc24b5ac76188fe9612dc51777e

  • SHA1

    0c0dddf34dbf7b95e82c58fdb7cfabb80db90430

  • SHA256

    e53bd0b8797b8c0cc32875dba3469b938eb8d1c3812b2829378cdb7d40b62654

  • SHA512

    02c4abdc825b0d3b9a88a1d66232d6f42497b7d83c6bfc473df8efbc0350371653d3ce220409aa5968cf71396ec230dea52e3793085d1f06d2338e4360c8bc93

  • SSDEEP

    768:LrJDweBDuOkScrbsN/x6WECAr43MkfJF5Pa9p+U6iOwhF3/ibK:pDwewicrbsN/YDRr4RF49IU6iOwv6G

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

57.128.132.221:7000

Mutex

A0pVR4huor1J3yZ3

Attributes
  • Install_directory

    %AppData%

  • install_file

    Win32runtime.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient (1).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections