Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    32KB

  • MD5

    7d94e01b941c37a96bd970d8a858edb3

  • SHA1

    2e11509c798ca22dc677b904e5944f68bd8386b3

  • SHA256

    f5fb868ed195b845f96a812c406f20292974b5a3c45c7a511785fbfef6af90f6

  • SHA512

    aeff8a8803ab310af275789bce86d611400ddc2b0f4639d47b234fd24fc61efe0ac23644c7298f33ab9a157e03cc825e59502e3c930773f512e0ef0b5683cb9c

  • SSDEEP

    384:WYxRXcrP31VZBELRUnvJff3cdiwJVARJpkFTBLToOZwxJd2v99Ikuis3hVFxOjhQ:OPjgRevJ3cdXVAGF/9j4Ojh9bu

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

g44V62U0yjJPmCKq

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/H3wFXmEi

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections