Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

XClient.exe

windows7-x64

10

XClient.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    65KB

  • MD5

    b2b82399ba6e9a1dad5056d76fd7c38c

  • SHA1

    acd51a93c03e6375282c732e46dbba093d004277

  • SHA256

    b79174702d042f1f7fb9ae8edc60262397d736b34751eb1a3bc810c9a8728c46

  • SHA512

    9ba54b085761f397f8a7e0825e1d4bbba63662556bfe7a789f1895849bc6f8477d69953c75984cdac7fe501dc02954c6254943b60989934fa08331711644f75d

  • SSDEEP

    1536:m3/NH4JsOCr53ewg/pFNQLDOeP8Br1+kb1bQ11XyBGqOcgoP7SQ:oNH4+VNg/pFODpgckb1a8BGqOcgaSQ

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

C2

paypal-themselves.gl.at.ply.gg:34855

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    winaudiog.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections