General
- Target XWormClient.exe
- Size 150KB
- Sample260628-v76d7sav51
- SHA256 5af5cf4b01824de8a60af73b29f15c20fd2a884d98c61129b85e16f243d7b43f
- MD5 b4c04dafe70894b2fae56268ff683327
- SHA1 239d13fca9dcb3f37afe6af0d5a47f7721766d85
- SHA512 cbce8a1c562c5995fabbb956ff00e25d41f190ed10d17488fc10aef1d005452112badee2013c4320923eafc49e09f2397d5b958186cdc75caced525823df8a35
- SSDEEP 3072:PdpwXLjjo45b+PAfmHFvPfSr933hNp6LKz2bvgDni:n6osHOHRMnhNQLKz2by
- TLSH T169E36C1EFB425D22EA6D8E73C5A340584AE5D4A76437FBAF24C818F49CE38D88F4B454
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XWormClient.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
XWormClient.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target XWormClient.exe
- Size 150KB
- SHA256 5af5cf4b01824de8a60af73b29f15c20fd2a884d98c61129b85e16f243d7b43f
- MD5 b4c04dafe70894b2fae56268ff683327
- SHA1 239d13fca9dcb3f37afe6af0d5a47f7721766d85
- SHA512 cbce8a1c562c5995fabbb956ff00e25d41f190ed10d17488fc10aef1d005452112badee2013c4320923eafc49e09f2397d5b958186cdc75caced525823df8a35
- SSDEEP 3072:PdpwXLjjo45b+PAfmHFvPfSr933hNp6LKz2bvgDni:n6osHOHRMnhNQLKz2by
- TLSH T169E36C1EFB425D22EA6D8E73C5A340584AE5D4A76437FBAF24C818F49CE38D88F4B454
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.