aedb97fe1ee029849cab6e25b3e6f08ad6a8af2484e18276934237ed7d1ca7fe | Triage™

Login
Reports

Overview

overview

7

Static

static

3

XWormClient.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
XWormClient.exe
Size 143KB
Sample260822-za3z2ayfqe
SHA256 aedb97fe1ee029849cab6e25b3e6f08ad6a8af2484e18276934237ed7d1ca7fe
MD5 c0e0e08d27c5cb8c6a0b457ca11d829d
SHA1 dbf0a08d9fa1314ca98be845648b7dd24ddedcc8
SHA512 a4107cae01cc1bec4fee11c668325e705679841100736ea123008f89edd5dcdcf114bd8fe5ae81c51ec6fbb509432a9e3fdb931be608ae410dbd9586bcda454c
SSDEEP 3072:9uizqBkksuNz9Vvl6bNJpA80xSiyOZM2dSfzA2qTT:9eBkksqTvl6bbpHiuzx
TLSH
T12DE33BD837E80619F3FFBE7159F42552CA3DB692AD22D61E2094029F0D27B49CC50B6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution persistence

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

XWormClient.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery execution persistence

Malware Config

Targets

- Target
  XWormClient.exe
- Size 143KB
- SHA256 aedb97fe1ee029849cab6e25b3e6f08ad6a8af2484e18276934237ed7d1ca7fe
- MD5 c0e0e08d27c5cb8c6a0b457ca11d829d
- SHA1 dbf0a08d9fa1314ca98be845648b7dd24ddedcc8
- SHA512 a4107cae01cc1bec4fee11c668325e705679841100736ea123008f89edd5dcdcf114bd8fe5ae81c51ec6fbb509432a9e3fdb931be608ae410dbd9586bcda454c
- SSDEEP 3072:9uizqBkksuNz9Vvl6bNJpA80xSiyOZM2dSfzA2qTT:9eBkksqTvl6bbpHiuzx
- TLSH
  T12DE33BD837E80619F3FFBE7159F42552CA3DB692AD22D61E2094029F0D27B49CC50B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy