Overview

overview

8

Static

static

1

XClient_exe.html

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient_exe

  • Size

    11KB

  • Sample

    230214-tz34faea7y

  • MD5

    0cd2a24db077a0575e4a6c71b055001d

  • SHA1

    5a1b3bd15dc0d432227f7ea29e92ba6aa9eb6c37

  • SHA256

    3ae04286d36b24d275cad9ff839bcdaa087114161c24ea7b32baf0b54c4afd06

  • SHA512

    a58d115548452664808ef9a06ef733650d10f8bbec05e734fe99ee620a57d3d520b2e0ea85ca7253add249fca584a3c734908c02c9e922ff3b9b73ae6bfb1a2d

  • SSDEEP

    192:/FINApYbTujKqNcPaUsIupQZwEmP6BL+eLZG7YEfbp0UOiJyv:WNsYbTRPaTQZwEfBL+eLZG7DbKTt

Score
8/10
persistence

Malware Config

Targets

    • Target

      XClient_exe

    • Size

      11KB

    • MD5

      0cd2a24db077a0575e4a6c71b055001d

    • SHA1

      5a1b3bd15dc0d432227f7ea29e92ba6aa9eb6c37

    • SHA256

      3ae04286d36b24d275cad9ff839bcdaa087114161c24ea7b32baf0b54c4afd06

    • SHA512

      a58d115548452664808ef9a06ef733650d10f8bbec05e734fe99ee620a57d3d520b2e0ea85ca7253add249fca584a3c734908c02c9e922ff3b9b73ae6bfb1a2d

    • SSDEEP

      192:/FINApYbTujKqNcPaUsIupQZwEmP6BL+eLZG7YEfbp0UOiJyv:WNsYbTRPaTQZwEfBL+eLZG7DbKTt

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks