Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

XClient.exe

windows10-1703-x64

10

XClient.exe

windows10-2004-x64

XClient.exe

windows11-21h2-x64

Resubmissions

04/08/2024, 11:35

240804-nqcl8sycrd 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    61KB

  • MD5

    d32248d4b7834bbe4310a9bac11968ee

  • SHA1

    b4d455bcb0c49520cfaae79321ebd2e50bd60ec6

  • SHA256

    13e0f289871d5fdb46d212725c9b13d3ab9c5012480c7cf4dd3a6708f0c3c908

  • SHA512

    70d15f6c89705484523a68267fe9765a15c437f4384ddbfa922b8a52f82e94cb53673c415f68bb42df76d3326b95dbfa4b407a1913bb9cec536ebbb6863c5f50

  • SSDEEP

    1536:zhlXi9DkMS27xQz1AOmfkbWzOhcRsUXjIOJHujn:zLy6MDu1xmkbWaalcOJH0

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

tree-cleaning.gl.at.ply.gg:33027

Attributes
  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections