General
- Target XWormClient.exe
- Size 110KB
- Sample260701-thkkrsbw2v
- SHA256 ba8059370df82d33b74fdf9033230d402ab33ead16b5f6b8eec755daf3517277
- MD5 3e9ef3628ab4f9482de13c2123b42198
- SHA1 37d4108b5cb403508b1bc86e0618d09baaa4a61c
- SHA512 af5023417acd437328f4b64f31b8e64691a98dba2ea69b43b3dd2de2e453291b1008f78e34850ad835c04fb7c61fef5d069acfbe759a5f7a8b15f0536cde5964
- SSDEEP 1536:p3Y+acI1y+1HVCVR//P6iTQqVys9C5EEJ9kS4jgmfOfe4b0r71jy/dbKiZ1z:p3DPWBkf6isU9abXpfpgn1G1bKa5
- TLSH T16CB37D4EFB818944C65D0E77856398448BB8D497712BFBEB31D44AF41EEB4A8CE4F860
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XWormClient.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
XWormClient.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target XWormClient.exe
- Size 110KB
- SHA256 ba8059370df82d33b74fdf9033230d402ab33ead16b5f6b8eec755daf3517277
- MD5 3e9ef3628ab4f9482de13c2123b42198
- SHA1 37d4108b5cb403508b1bc86e0618d09baaa4a61c
- SHA512 af5023417acd437328f4b64f31b8e64691a98dba2ea69b43b3dd2de2e453291b1008f78e34850ad835c04fb7c61fef5d069acfbe759a5f7a8b15f0536cde5964
- SSDEEP 1536:p3Y+acI1y+1HVCVR//P6iTQqVys9C5EEJ9kS4jgmfOfe4b0r71jy/dbKiZ1z:p3DPWBkf6isU9abXpfpgn1G1bKa5
- TLSH T16CB37D4EFB818944C65D0E77856398448BB8D497712BFBEB31D44AF41EEB4A8CE4F860
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application