Analysis
-
max time kernel
148s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
22/05/2023, 08:39
General
-
Target
XWorm.exe
-
Size
90KB
-
MD5
1dc0ce6f92aa7aaaaaec0bbf2cf0be94
-
SHA1
961e990d821b8ce87791f61d0f53a1cfa327dcd3
-
SHA256
bef2ed0a20aea417015b81a574c58ebe24eb97ee869519f5d0031a8335370226
-
SHA512
99b6827189b45ec08662c3648ba34588ff9c412ecc8f20b8d0c3806b372b1a09e1fc81a32251a1eece9415724585d1b72a038ad24c523696130900e706f60ac9
-
SSDEEP
768:JBISmPlxMcazgTKd3iz5RVw6zlDq3RzUJ/pJCxE85:JBIzmyt/w6h2RzkJCx5
Score
10/10
Malware Config
Extracted
Family
xworm
Mutex
UCLCU6390UZNp9OE
Attributes
-
install_file
USB.exe
aes.plain
Signatures
-
Xworm
Xworm is a remote access trojan written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\XWorm.exe"C:\Users\Admin\AppData\Local\Temp\XWorm.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
112KB
-
Filesize
512KB
-
Filesize
512KB