General
- Target Obfuscated.rar
- Size 57KB
- Sample260701-tfa9babv9t
- SHA256 77a65141fddabae49cc53de83a2c7757b48f20e7159495f1735574b11f029904
- MD5 6b2400c604f69453180b3ee800de587e
- SHA1 9d0f2ea4f728309c0a8521b3e6fc1c7616dc100c
- SHA512 8db4eb52105e3fb259fa5f6972de312dff23f6f144239c66c51c8ec50dd398ad1e4d5b9ae85df6c64fb4d0a7ac83e9983af314c6eae518411727ab02a82cc9ab
- SSDEEP 768:WEFXZAjIIguWWQLpk7v3mqqE5M69pwLM8fuml4j3v9trdpD2iBAn0t/4zrT28I3R:ZAEuQ27T15zpEK3vH/D2ia2/4XEh
- TLSH T11743029F96C4C4A5D26E58B0F33C4DFA20FF1C053198FDDA664B2A90320A275BBD254D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Obfuscated/XWormClient.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Obfuscated/XWormClient.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Obfuscated/XWormClient.exe
- Size 110KB
- SHA256 ba8059370df82d33b74fdf9033230d402ab33ead16b5f6b8eec755daf3517277
- MD5 3e9ef3628ab4f9482de13c2123b42198
- SHA1 37d4108b5cb403508b1bc86e0618d09baaa4a61c
- SHA512 af5023417acd437328f4b64f31b8e64691a98dba2ea69b43b3dd2de2e453291b1008f78e34850ad835c04fb7c61fef5d069acfbe759a5f7a8b15f0536cde5964
- SSDEEP 1536:p3Y+acI1y+1HVCVR//P6iTQqVys9C5EEJ9kS4jgmfOfe4b0r71jy/dbKiZ1z:p3DPWBkf6isU9abXpfpgn1G1bKa5
- TLSH T16CB37D4EFB818944C65D0E77856398448BB8D497712BFBEB31D44AF41EEB4A8CE4F860
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application