General
- Target XClient.exe
- Size 357KB
- Sample260709-gkbdnady71
- SHA256 0d06a4072ad969b9b3d97fa6d29c91fd5e857a11bf0310c967915db8f2d1a2ed
- MD5 1c8609bbdf46cfdbc44f8dec3f98837c
- SHA1 298ba7f1dd10bbe614091a7363522ea6f0d7a09c
- SHA512 acc281acba91c46d68abe33823f7cab2a81a84367893e98ee7052478299eae43ee4743552dd96b11f88098820ce8a57488c8ed311f04a88e1d0f48081213e209
- SSDEEP 6144:D11YcygEBwZYI0V84nE13IW3Ylb2N1b8+eTRhmWwQv96nz3/+IbjxS5GaVBTr:Ds0EoYI6/nW3sZ2NF8+ethmWDvcnymy
- TLSH T10B74E01176D0C5B1D5B7103148F49A794E3EF8320B22ADEF7388A7BE4A246C15A365EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XClient.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
XClient.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
XClient.exe
Resource
win10ltsc2021-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target XClient.exe
- Size 357KB
- SHA256 0d06a4072ad969b9b3d97fa6d29c91fd5e857a11bf0310c967915db8f2d1a2ed
- MD5 1c8609bbdf46cfdbc44f8dec3f98837c
- SHA1 298ba7f1dd10bbe614091a7363522ea6f0d7a09c
- SHA512 acc281acba91c46d68abe33823f7cab2a81a84367893e98ee7052478299eae43ee4743552dd96b11f88098820ce8a57488c8ed311f04a88e1d0f48081213e209
- SSDEEP 6144:D11YcygEBwZYI0V84nE13IW3Ylb2N1b8+eTRhmWwQv96nz3/+IbjxS5GaVBTr:Ds0EoYI6/nW3sZ2NF8+ethmWDvcnymy
- TLSH T10B74E01176D0C5B1D5B7103148F49A794E3EF8320B22ADEF7388A7BE4A246C15A365EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detect Xworm Payload
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.