Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

XClient.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    83KB

  • MD5

    a553d650efef4d852fb707270a57f6b8

  • SHA1

    80dfd72248fc1522b1f6cacf24b4258865e5bce4

  • SHA256

    4d87eb4b63dee3832f8a94445e8d5b7c8f1d5335650d0fab2b6bfdc3d6b591d2

  • SHA512

    6132fb8204e6a4fff10f9788abb63840f0d34f752f0c28aa9c49a21c38ffa14a6aa0b8bcdfad887e84aa24297dcbdacf46608ad0eada859b85cab95b4cadfd46

  • SSDEEP

    1536:xSteEftgm7/FDdQv78wWbG3NycZ8TufTa3sQwYPo62+2ONvNIAsF:3OldgAdbG3NV6gSqONvN8F

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

another-limits.gl.at.ply.gg:63201

Attributes
  • Install_directory

    %ProgramData%

  • install_file

    $77wsappx.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections