General
- Target XWormClient.exe
- Size 123KB
- Sample261013-3cfjascy6x
- SHA256 db0029756a4d9b0897d2ce955b1e251e601d76dbf575a17dfc7da3349c8e1239
- MD5 3f1816daa6c207892b1f225ee1f09fb7
- SHA1 c5123f18e86c76763a9d43f1b9576ae3e13dedf4
- SHA512 02d91a13a99dab639fe0a0d2b359fc909a28833e7396859c58276e97d08773173369e072ebe2e4ad41832c258cdb080cc7ba7cb3a170d08de54ddb2525a558d9
- SSDEEP 1536:DOcGDJlqcNgtmE7ZGC8t0ITvNFwPghq4yKHf4KIsbi9HyQfb/6tXt2oeE0SFLaRk:V8DgtmE7ZlGVFwXK/4Kri7fbsXBMil
- TLSH T158C3496EFF520D09C26D0D778667004987ACD896642FFBBB15D85CF2ADE3C988DCA490
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XWormClient.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
XWormClient.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target XWormClient.exe
- Size 123KB
- SHA256 db0029756a4d9b0897d2ce955b1e251e601d76dbf575a17dfc7da3349c8e1239
- MD5 3f1816daa6c207892b1f225ee1f09fb7
- SHA1 c5123f18e86c76763a9d43f1b9576ae3e13dedf4
- SHA512 02d91a13a99dab639fe0a0d2b359fc909a28833e7396859c58276e97d08773173369e072ebe2e4ad41832c258cdb080cc7ba7cb3a170d08de54ddb2525a558d9
- SSDEEP 1536:DOcGDJlqcNgtmE7ZGC8t0ITvNFwPghq4yKHf4KIsbi9HyQfb/6tXt2oeE0SFLaRk:V8DgtmE7ZlGVFwXK/4Kri7fbsXBMil
- TLSH T158C3496EFF520D09C26D0D778667004987ACD896642FFBBB15D85CF2ADE3C988DCA490
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.