Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    78KB

  • MD5

    a25ac87d1fea176e553d1892811b8c8d

  • SHA1

    9b624bebe8d344209f6c3d4fa160becb9a3e11dc

  • SHA256

    474c6f3085668a490c022349ebae846ec861c7842500e92f8ffa45d4f78ce10b

  • SHA512

    7a137d4ccc1766351f2ea1a20f4866491b36edaff4902c54d5edf1b69fe22fcae200a14a8d779fbb439f190bd070e91e2bdcbd7b7d2b508901167586a4b31db6

  • SSDEEP

    1536:MeQgyB1wb3whRLC7CkbPOOsexl6FdyOGL8jRBYb:Bp61wbKkbPumOGL8jRBY

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

37.114.39.24:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    winxd9.exe

  • telegram

    https://api.telegram.org/bot7574778549:AAEqgXDQvR3Aj3QmQtNrJtln4Nkd7sNBWVc/sendMessage?chat_id=6855762756

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections