General
- Target XWormClient.exe
- Size 234KB
- Sample260806-qvtsesscra
- SHA256 2b41a2ebb26266fbd6df2e94f2f9321354bd30a8b0209f2c5500d9e28ba847c4
- MD5 5d5390889c5f57ac5e706a302551299e
- SHA1 d28e68dbf72c84d2c5c153004f637b871f0695cc
- SHA512 2d2f88a71bd0e9281663a5d55e768feb4284ec05f74c55aad7f7e7221e9c5b138842f439647c5ba48efcf127694e0839c186f2cb094b4a715766276d5765fb5b
- SSDEEP 3072:zW1BROhU2mFIXCFUM+UGPJG/izOaMpEfbmLAbDwVLOGavBz65/M6If+3Js+3JFkt:gZ2XUH+ZJSaIEaLAbMV4vxBt25
- TLSH T1BE346C47BA41C690C62C4D33C46796E40F35FC5AEB2BB6AB35C4BEA67DB38948D0B450
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XWormClient.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target XWormClient.exe
- Size 234KB
- SHA256 2b41a2ebb26266fbd6df2e94f2f9321354bd30a8b0209f2c5500d9e28ba847c4
- MD5 5d5390889c5f57ac5e706a302551299e
- SHA1 d28e68dbf72c84d2c5c153004f637b871f0695cc
- SHA512 2d2f88a71bd0e9281663a5d55e768feb4284ec05f74c55aad7f7e7221e9c5b138842f439647c5ba48efcf127694e0839c186f2cb094b4a715766276d5765fb5b
- SSDEEP 3072:zW1BROhU2mFIXCFUM+UGPJG/izOaMpEfbmLAbDwVLOGavBz65/M6If+3Js+3JFkt:gZ2XUH+ZJSaIEaLAbMV4vxBt25
- TLSH T1BE346C47BA41C690C62C4D33C46796E40F35FC5AEB2BB6AB35C4BEA67DB38948D0B450
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.