Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    36KB

  • MD5

    c4e5b29e6d3ac61b6a5b36b8d208bbbb

  • SHA1

    15f2cb1aa5b4413752d70e7305828f9461af0ca6

  • SHA256

    ec46b8a0e372f8062ff4f3cc8a6817543aa2781e5a6d74bf914b3b43b4f087e3

  • SHA512

    9a3ed168295db01ce5f98f59f8478d88d71744213191c4e221d761a3a79e9a281523d3b360b5bd305d7606bc4aebb80f337b18f21982f66de63a13664078c598

  • SSDEEP

    768:reVXtHcDQZS9LR50UZmx/F89Rj6OOMhdQJT:r8dH+t51OF89Rj6OOMnS

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

5.0

C2

database-victoria.gl.at.ply.gg:7777

Mutex

jGCQbD88dCyoEfYL

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections