General

  • Target
    XClient.exe
  • Size 337KB
  • Sample260706-a3fyjagy6y
  • SHA256 20c9e31467449ec5c2b9c37e42eb8d23d74c1a14daa62338cf0f66ff24ba5ba4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      XClient.exe
    • Size 337KB
    • SHA256 20c9e31467449ec5c2b9c37e42eb8d23d74c1a14daa62338cf0f66ff24ba5ba4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks