Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    34KB

  • MD5

    d0c8b1d2b66ac787bcdf240539eb6efa

  • SHA1

    156972e8ce9b6fcb0221d6180b964ab1037202b6

  • SHA256

    d329597dff93a3c57c56347c63f86e32af32fb403926c803f8fff1fb3917b209

  • SHA512

    cad2eba4bc3c9d476f6f50a031caa6380dadd18272dd469be003a624b9798949458a12b3ad016808eb048fd44f78519e4b9b1546f8549b5065c1bc9aa029bb0f

  • SSDEEP

    768:gH+65A2tPNhzIgtoFk9Fy9Y+OjhJ/Vcv:g15pt0gtowFy9Y+Ojbtcv

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

a479-2603-8081-6a00-2328-1f9-4b54-9ee9-7461.ngrok-free.app:5383

Mutex

p1qbBcbYqG1HD2q1

Attributes
  • Install_directory

    %AppData%

  • install_file

    Realtek Audio Driver.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections