Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

XClient.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    58KB

  • MD5

    0b664dbbbb3530b7f6bef9b1d61addb9

  • SHA1

    9f5d5bd42ec1c44db3274396754db0c46ac169a5

  • SHA256

    48d74602d8e488f13359a7c54e4ff30e3e48d44190e57153539207b57a0f3ea4

  • SHA512

    6adff37cac5cc056f17c63b7cfefe6d7d4ab1da19ca3c5b59cbf22ead471e3c7416ff2b70eaf8be81af77dffabbd521aa563296eef6297e1e71bcbb42f9293cf

  • SSDEEP

    1536:NELc8UB3jYNK6stQKEHSWcagrR4Zb/sordrmt69O0b0BQ5O:mLvUtYVTKEHSWcNR4Zb/JdO0b0BIO

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

147.185.221.22:4999

Attributes
  • Install_directory

    %Public%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections