Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

XClient.exe

windows10-ltsc 2021-x64

10

Resubmissions

06/03/2025, 14:33

250306-rw458azzdv 10

06/03/2025, 14:29

250306-rtqvtazygz 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    34KB

  • MD5

    420aaab8a4e68d5730a9e19422a0fe96

  • SHA1

    f4dd350f797169f22c8efd7de8a252b7d2fcf8ae

  • SHA256

    d65824b6d2c191eb48d040261d408ecb3f1d0cf6ef9ceac096543b184582aded

  • SHA512

    fa1ccd03397231387559381aa7762e786b98fa89c02a8b09b6804a14ed0a3ce45ba11bb6b5f7a112a2420a3bd25f708f2ebc4afb281c377dc372fca563e63f98

  • SSDEEP

    768:0e749/qEkLACVVickCVFy19JZ6aO/hoq/:XaCEk8hcdF49JZ6aO/CQ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

association-lectures.gl.at.ply.gg:32463

Mutex

Gpg1PP1lxuWY9X4X

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections