xworm | a2537d6d17d6b467615d704db73ed0709b15805f7cd4104352ec9770914ad8f3 | Triage

Resubmissions

01-12-2022 16:44

221201-t9a6eacb3s 10

10-10-2022 16:38

221010-t5dqqscef7 1

Sharing

General

Target

xdUG6PT3p1pY.exe
Size

40KB
Sample

221201-t9a6eacb3s
MD5

72c59f9a4209e3b6ac018eb62b00f096
SHA1

7adffec99fc2fb1ff04c6269649d1bb1a3710ae1
SHA256

a2537d6d17d6b467615d704db73ed0709b15805f7cd4104352ec9770914ad8f3
SHA512

b77d4fdd9703639f73d7c821290647b3155ed9208662d30da32327095c526648d77c88a8a3a83d942bbdb30d9a8db727f2d64801721b4665a27d6cd61715f8d3
SSDEEP

768:yQ2dJcMPPNqZ2cdSBz0RpfhJsQhLOn+eko:lOdbcfn1O+eko

Score

10^/10

xworm rat trojan

Malware Config

Extracted

Family

xworm

C2

liouas.ddns.net:8080

Mutex

Y7Zk0CXxLQEpCXGE

Attributes

install_file
USB.exe

aes.plain

Targets

- Target
  
  xdUG6PT3p1pY.exe
- Size
  
  40KB
- MD5
  
  72c59f9a4209e3b6ac018eb62b00f096
- SHA1
  
  7adffec99fc2fb1ff04c6269649d1bb1a3710ae1
- SHA256
  
  a2537d6d17d6b467615d704db73ed0709b15805f7cd4104352ec9770914ad8f3
- SHA512
  
  b77d4fdd9703639f73d7c821290647b3155ed9208662d30da32327095c526648d77c88a8a3a83d942bbdb30d9a8db727f2d64801721b4665a27d6cd61715f8d3
- SSDEEP
  
  768:yQ2dJcMPPNqZ2cdSBz0RpfhJsQhLOn+eko:lOdbcfn1O+eko
Score

10^/10

xworm rat trojan
- Xworm
  Xworm is a remote access trojan written in C#.
  trojan rat xworm
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2