General
-
Target
2025-03-04_6803215592fd9cd6ffb299385dc44b8e_hiddentear
-
Size
151KB
-
Sample
250304-2cyjfatjs4
-
MD5
6803215592fd9cd6ffb299385dc44b8e
-
SHA1
9bdb0356393386162063ea6f9cd5f72b51119264
-
SHA256
04c75c092c9f64493318740487b08858644373a3b9f4c549f9cd2b25ea60d548
-
SHA512
c46ec6fea4781072d80c383757da4475c2a983c411c61bfb784b64c294bfafaa343b8176b22697666c3c1fa7d4c01a074cf163c9c4f30b3ff0b8e03c435e9b2b
-
SSDEEP
3072:exNg5f/SLXkbvhPOpCM+lmsolAIrRuw+mqv9j1MWLQA:eQyUbK+lDAA
Behavioral task
behavioral1
Sample
2025-03-04_6803215592fd9cd6ffb299385dc44b8e_hiddentear.exe
Resource
win7-20240903-en
Malware Config
Extracted
xworm
135.148.125.190:46613
-
Install_directory
%Temp%
-
install_file
XClient.exe
Targets
-
-
Target
2025-03-04_6803215592fd9cd6ffb299385dc44b8e_hiddentear
-
Size
151KB
-
MD5
6803215592fd9cd6ffb299385dc44b8e
-
SHA1
9bdb0356393386162063ea6f9cd5f72b51119264
-
SHA256
04c75c092c9f64493318740487b08858644373a3b9f4c549f9cd2b25ea60d548
-
SHA512
c46ec6fea4781072d80c383757da4475c2a983c411c61bfb784b64c294bfafaa343b8176b22697666c3c1fa7d4c01a074cf163c9c4f30b3ff0b8e03c435e9b2b
-
SSDEEP
3072:exNg5f/SLXkbvhPOpCM+lmsolAIrRuw+mqv9j1MWLQA:eQyUbK+lDAA
-
Detect Xworm Payload
-
Xworm family
-
Drops startup file
-