Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://anonfiles.co...

windows10-1703-x64

10

Resubmissions

14/02/2023, 20:36

230214-zdxmesga75 7

14/02/2023, 20:35

230214-zc9klaga69 1

14/02/2023, 20:24

230214-y659laga36 7

14/02/2023, 19:55

230214-ym4lnafg98 7

14/02/2023, 19:46

230214-yg4pgafc2s 10

14/02/2023, 19:39

230214-yc3avafb7s 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://anonfiles.com/o2r5R7Wfy5/XWorm_V3.1_zip

  • Sample

    230214-yg4pgafc2s

Score
10/10
asyncratratspywarestealer

Malware Config

Targets

    • Target

      https://anonfiles.com/o2r5R7Wfy5/XWorm_V3.1_zip

    Score
    10/10
    asyncratratspywarestealer

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers.

      ratasyncrat

    • Contains code to disable Windows Defender

      A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Uses the VBS compiler for execution

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks