General
- Target XWormClient.exe
- Size 128KB
- Sample260731-dwn74sshkd
- SHA256 7c46d77f1e521efd535dbf51a9190c85f0f2726cc1671f53633e613970c8daf1
- MD5 205709ff40e55bd04b1d95110dc8ef4d
- SHA1 6739898df4a12bc57007b3e0b6646d949f113a8a
- SHA512 fb48b11d416bdfb782110fdf90f8f24d1096a5c80cd445a0f35f17a916a28cf6de4a651b62a2a673e50138614f4d01b13aa947f41339ecf4b224a6eae8fa8150
- SSDEEP 3072:R0LXr7VhgcmkuHI3LhxkbN3hVCgMX/Tfbhomx:OBhgc30R78bh
- TLSH T115D33AAEFB625958C80D0D378863924E47B5D9A731A7FFEB14C858F81DF389D8D86480
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XWormClient.exe
Resource
win11ltsc2024-20260709-en
2 signatures
900 seconds
Malware Config
Targets
-
- Target XWormClient.exe
- Size 128KB
- SHA256 7c46d77f1e521efd535dbf51a9190c85f0f2726cc1671f53633e613970c8daf1
- MD5 205709ff40e55bd04b1d95110dc8ef4d
- SHA1 6739898df4a12bc57007b3e0b6646d949f113a8a
- SHA512 fb48b11d416bdfb782110fdf90f8f24d1096a5c80cd445a0f35f17a916a28cf6de4a651b62a2a673e50138614f4d01b13aa947f41339ecf4b224a6eae8fa8150
- SSDEEP 3072:R0LXr7VhgcmkuHI3LhxkbN3hVCgMX/Tfbhomx:OBhgc30R78bh
- TLSH T115D33AAEFB625958C80D0D378863924E47B5D9A731A7FFEB14C858F81DF389D8D86480
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.