Overview

overview

10

Static

static

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    58KB

  • Sample

    240609-vytn2sde67

  • MD5

    5f592bf19b6a2d932d5f41d4c814ad72

  • SHA1

    eac47fb107cb69f63a5ad403c8cf88886307095c

  • SHA256

    8df0f09e85201e02435652e3e77e5f4574732a977ac16d97a918d0f153ca3911

  • SHA512

    6c66943cc3560ecc02446d7bad0819406c1f4f5b9f703f892c9b5f48a06ab7674dadd99711ba6328af82e220a841d9fbceb9ab6244f216dbb6af989b9aa11212

  • SSDEEP

    1536:4/CaSt6xPMaxeflTdSkb376y3VcWxGDyFOVW1p:4qV6xPMCqxSkb3WylT8DyFOVWv

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

reports-audit.gl.at.ply.gg:17158

Attributes
  • install_file

    USB.exe

Targets

    • Target

      XClient.exe

    • Size

      58KB

    • MD5

      5f592bf19b6a2d932d5f41d4c814ad72

    • SHA1

      eac47fb107cb69f63a5ad403c8cf88886307095c

    • SHA256

      8df0f09e85201e02435652e3e77e5f4574732a977ac16d97a918d0f153ca3911

    • SHA512

      6c66943cc3560ecc02446d7bad0819406c1f4f5b9f703f892c9b5f48a06ab7674dadd99711ba6328af82e220a841d9fbceb9ab6244f216dbb6af989b9aa11212

    • SSDEEP

      1536:4/CaSt6xPMaxeflTdSkb376y3VcWxGDyFOVW1p:4qV6xPMCqxSkb3WylT8DyFOVWv

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm
    behavioral1

MITRE ATT&CK Matrix

Tasks