General

  • Target
    XClient.exe
  • Size 357KB
  • Sample260709-gkbdnady71
  • SHA256 0d06a4072ad969b9b3d97fa6d29c91fd5e857a11bf0310c967915db8f2d1a2ed
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      XClient.exe
    • Size 357KB
    • SHA256 0d06a4072ad969b9b3d97fa6d29c91fd5e857a11bf0310c967915db8f2d1a2ed
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

MITRE ATT&CK Enterprise v16

Tasks