Overview

overview

10

Static

static

10

XCliente.exe

windows7-x64

10

XCliente.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XCliente.exe

  • Size

    30KB

  • MD5

    b332466e7ad8264e2845d31415725f42

  • SHA1

    141d8093915d85fac1501d06a87ba901c39b8107

  • SHA256

    2d5050ca25920cb7a52aa4f77f1ed6a2ce4766d240eba793bac4b14af7d0681f

  • SHA512

    a60b7398ac9d92089994e9125e7259e9cca83bb05070a31a092d89122b76394905c1d07111b94756cf4fc91942296acb989498b1870b65d3fd29897e12d1a57a

  • SSDEEP

    384:ueAwIGmeffcbWICWv/0ILZGPcj0hYACSqR/inw2uRugtFuBLTIOZw/WVnvn9IkVO:+ecbl/b3jMYAoR/iw2uBFE9RYOqhtb3

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

192.168.1.114:1177

Mutex

roEOWd2CTFvG3l1K

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XCliente.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections