General

  • Target

    XClient.exe

  • Size

    51KB

  • MD5

    2787d9e8a64842885ebd6550255c6202

  • SHA1

    c7f33c3d403b424dc391a461d2c7a905314d4812

  • SHA256

    e6723248680578bc5be79251443739e1c7fac8ba1e5001a8341c77e3ffa6b2bc

  • SHA512

    63f22df446e975bdf19e9dfad802a72516b869f75842fa1a1e6c6575c595589d9e65d3dfe5ce41d9bf70566cf8b2fda87762da160a1e684b96f5ce425b049504

  • SSDEEP

    1536:JHpyf3bFAkbN8tGgQLlvz8jLZplO7t3J6K33:JQjCkbCt7c8LZplO7tZJ

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:80

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.