Overview

overview

10

Static

static

10

XClients.exe

windows10-ltsc_2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClients.exe

  • Size

    60KB

  • Sample

    250406-ld6y7sv1bs

  • MD5

    5da1254a429c85dfe8ad74260b17f11b

  • SHA1

    4f9a495a67a5bf8fe18bb5f848e538d45ee372f9

  • SHA256

    fe6b8895a77d58f352c158ce9915ef7abd1257acbc62495e8898174712c18c26

  • SHA512

    007e5fd978c4d7c570fd51e5167a7ed5da1ddf3d948ab5944f5c0bb0ce9e9c1a3e8ba3c5b186fb1180506da649245899ad988bda86b776b37c48612bf7bc22e2

  • SSDEEP

    1536:/MdDKdmZLVsLmhkbkaiwpssvqOdQGN64fUX8s:/MFt9kbkadspOdHhcX8s

Score
10/10
xwormrattrojan

Malware Config

Targets

    • Target

      XClients.exe

    • Size

      60KB

    • MD5

      5da1254a429c85dfe8ad74260b17f11b

    • SHA1

      4f9a495a67a5bf8fe18bb5f848e538d45ee372f9

    • SHA256

      fe6b8895a77d58f352c158ce9915ef7abd1257acbc62495e8898174712c18c26

    • SHA512

      007e5fd978c4d7c570fd51e5167a7ed5da1ddf3d948ab5944f5c0bb0ce9e9c1a3e8ba3c5b186fb1180506da649245899ad988bda86b776b37c48612bf7bc22e2

    • SSDEEP

      1536:/MdDKdmZLVsLmhkbkaiwpssvqOdQGN64fUX8s:/MFt9kbkadspOdHhcX8s

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1

MITRE ATT&CK Matrix

Tasks