xworm | d51f42146e8941faab7f80174bd0245a93fcd92f42614887b8b2d556e4d76228 | Triage

Sharing

General

Target

a.exe
Size

34KB
Sample

230327-xq1thaeh38
MD5

832a42b740a57843dc44adefd7c2c7db
SHA1

f0d60f281aa0a39f2078f9a5ae3664e3c63fa9e5
SHA256

d51f42146e8941faab7f80174bd0245a93fcd92f42614887b8b2d556e4d76228
SHA512

9af0bdf0ba3fbdbab24cba5cfca67eb24b5f2752e9c8f1acdea4f7fc93d16b0e4cca2df34417c5c6ecc566686d773e61d09f0b020f02032ff6ec04e078b02cdd
SSDEEP

768:STaKn2v/mYSTayNNOFM9hstuhO9hASEsRbyp:Sm/ejNAFM9hstuhO9ygRbC

Score

10^/10

xworm rat trojan

Malware Config

Extracted

Family

xworm

C2

193.42.33.22:5555

Mutex

CaE60WfjVddH5yYo

Attributes

install_file
USB.exe

aes.plain

Targets

- Target
  
  a.exe
- Size
  
  34KB
- MD5
  
  832a42b740a57843dc44adefd7c2c7db
- SHA1
  
  f0d60f281aa0a39f2078f9a5ae3664e3c63fa9e5
- SHA256
  
  d51f42146e8941faab7f80174bd0245a93fcd92f42614887b8b2d556e4d76228
- SHA512
  
  9af0bdf0ba3fbdbab24cba5cfca67eb24b5f2752e9c8f1acdea4f7fc93d16b0e4cca2df34417c5c6ecc566686d773e61d09f0b020f02032ff6ec04e078b02cdd
- SSDEEP
  
  768:STaKn2v/mYSTayNNOFM9hstuhO9hASEsRbyp:Sm/ejNAFM9hstuhO9ygRbC
Score

10^/10

xworm rat trojan
- Xworm
  Xworm is a remote access trojan written in C#.
  trojan rat xworm
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2