Overview

overview

10

Static

static

10

XClient5.exe

windows7-x64

10

XClient5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient5.exe

  • Size

    35KB

  • MD5

    ffed5d3bccb01afd79fa8bb2ee6fe38b

  • SHA1

    ee964352dfaffa2b543fce9dd5e9646b2d6faa52

  • SHA256

    7998e91587413f9e0ab5b5491781cfe68caa1c432a8d285ccf4ada8e80aee344

  • SHA512

    265ab907caa2f062bbff1d178806fae616d508a8745fc2760cb172f066ca256441d6363283bc421045707cf278434b34ecceccd33a4b5c7ea6950859ea3bbc1a

  • SSDEEP

    768:O4ajv+NFluD0i63XxbaifbH3DFJG76P/9Ca3924hxQuJvGfq:Kjv+xuD05baif73DFJt39F3924hWy0q

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient5.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections