Overview

overview

8

Static

static

3

XWorm_DNS_Crypter.exe

windows7-x64

1

XWorm_DNS_Crypter.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    XWorm_DNS_Crypter.exe
  • Size 3.0MB
  • Sample230708-vcs6dsgg2v
  • SHA256 b5df131373e2480d28873f9a2df7d4eadf0020267d3300ef0d2e7f6e282226ed
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
persistence

Malware Config

Targets

    • Target
      XWorm_DNS_Crypter.exe
    • Size 3.0MB
    • SHA256 b5df131373e2480d28873f9a2df7d4eadf0020267d3300ef0d2e7f6e282226ed
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Drops startup file

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks