Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    55KB

  • Sample

    241111-zk72qswelf

  • MD5

    19b5d87e76c248b9d288c71415bba462

  • SHA1

    e0665f86a7b8db622a64d225c46ff0fe9954710d

  • SHA256

    b69d2bae7a7d3fd39f65eb66ebab178e6013966c6747260e0bf25cdfca435542

  • SHA512

    00250801cbf9b0bdd73031a9f1ad2bfb52fb8668ea1a9a451a869020f6ea59347ff40a5a4fed4f8fc493c3ae6fbd713b113bb576b0285856761f9073ccbc72bb

  • SSDEEP

    768:PuuTBjI+opX7APWGVh+hapndS53xHogkb7Ak6MO+AEzONnkvh7OWh4x5xtc:mOWr+m8ndS53ZkbEk6GZzOi7OWuf7c

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

147.185.221.23:45767

Attributes
  • install_file

    USB.exe

Targets

    • Target

      XClient.exe

    • Size

      55KB

    • MD5

      19b5d87e76c248b9d288c71415bba462

    • SHA1

      e0665f86a7b8db622a64d225c46ff0fe9954710d

    • SHA256

      b69d2bae7a7d3fd39f65eb66ebab178e6013966c6747260e0bf25cdfca435542

    • SHA512

      00250801cbf9b0bdd73031a9f1ad2bfb52fb8668ea1a9a451a869020f6ea59347ff40a5a4fed4f8fc493c3ae6fbd713b113bb576b0285856761f9073ccbc72bb

    • SSDEEP

      768:PuuTBjI+opX7APWGVh+hapndS53xHogkb7Ak6MO+AEzONnkvh7OWh4x5xtc:mOWr+m8ndS53ZkbEk6GZzOi7OWuf7c

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1

MITRE ATT&CK Matrix

Tasks