Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    73KB

  • MD5

    b8b591cdf24497b0014caa76b4c42727

  • SHA1

    f4337b4a18e1664eadccd88f94743b9b40eaba1d

  • SHA256

    1136793c68ab82351f88cf0d385c56b96907b7bbf019337646cec294f61b9309

  • SHA512

    3775d6714091704ee1597c75a97cf3621c29365b6fc4ae87eae9f380fae1d18db6af2c080fbdc78f77c25c04a36c44ec1327f514eef423fc9a842b44ace65bef

  • SSDEEP

    1536:Uk3l8IOb4GgTt7NVKWr4b1UZEi/r6ye5pb+XOAL3X6+WwNK:Uk3iIOqT3r4b1UZhW5pb+OAjX6+WwNK

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.20:41205

192.168.1.11:41205

field-clark.gl.at.ply.gg:41205
Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections