Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    76KB

  • MD5

    a8b66f2a3ffdbcdfe51880b36e1151d4

  • SHA1

    5adebdc53fa727bd3b36777b6fde987af81a5eca

  • SHA256

    6b798848bbb03eaa5037f467c89974f5a5ea63c254454f1466214fad3038bb51

  • SHA512

    f265a61240ac4734bfc455f51d024c5163db50defb95ce4bd0aa08d966868412947ef8ae86a6eaa149a74c9aa16798a008e888b2748ab7eb2f8c7e2b6efa8d77

  • SSDEEP

    1536:txZj5C0QZe/rUBghsfHi0ufFbzbVijLwnR68wEO7lk0F:tvjs+/gBgyfHiNfbwPpEO7lk0F

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

147.185.221.20:41205

192.168.1.11:41205

field-clark.gl.at.ply.gg:41205
Attributes
  • Install_directory

    %AppData%

  • install_file

    XClient.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections