Overview

overview

10

Static

static

10

1877b7bcc1...4c.exe

windows7-x64

10

1877b7bcc1...4c.exe

windows10-2004-x64

10

Resubmissions

01-12-2022 16:45

221201-t9gyyscb4t 10

12-11-2022 08:00

221112-jvzkcaed32 1

Analysis

  • max time kernel
    133s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-12-2022 16:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1877b7bcc1bc998e1d4e53a55cb1cd4c.exe

  • Size

    40KB

  • MD5

    1877b7bcc1bc998e1d4e53a55cb1cd4c

  • SHA1

    55e6c2f9a9325b79938bafa82ef5b76f030a912b

  • SHA256

    2c24d359f441614a46f56ce5c94a361cdfd03cd1bf91a99b1183675d6bf362a9

  • SHA512

    072c9aa2f849728b088dcc15bb2285942288df9e807eeb20917eafe522e1d73607c6e2565eef3d9478f0db3d480691cd3803684126cdf50548ef22b14f654bce

  • SSDEEP

    384:0/z/7roZ+lv83FLWnCqbmnaQDcag7zuPgg7Kx493yBtrLaWGPjxLCPOnsSZwHBWx:g/7roZ+v81mvx7zgJKd3yWWtRF3

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

206.189.139.209:20715

Mutex

nsQFsyCH3iPZkMHA

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\1877b7bcc1bc998e1d4e53a55cb1cd4c.exe
    "C:\Users\Admin\AppData\Local\Temp\1877b7bcc1bc998e1d4e53a55cb1cd4c.exe"
    1⤵
      PID:3488

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3488-132-0x0000000000480000-0x0000000000490000-memory.dmp
      Filesize

      64KB

      Download
    • memory/3488-133-0x00007FFA98630000-0x00007FFA990F1000-memory.dmp
      Filesize

      10.8MB

      Download
    • memory/3488-134-0x00007FFA98630000-0x00007FFA990F1000-memory.dmp
      Filesize

      10.8MB

      Download