Overview

overview

10

Static

static

10

23.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    23.exe

  • Size

    75KB

  • Sample

    240309-zzlgaaad72

  • MD5

    336d4d8bfa4a49a974720d89a6275a04

  • SHA1

    5d4b71b8d70dcf5bb4edf3e4d13daf325a9c34ea

  • SHA256

    c2d5c4a5a91be743ef7b4abdfb983343968f989d6dd86c686f2a1fc56393f380

  • SHA512

    edc58daf7298d9b264b81088551620cc48f10f96a1657cd3c21f67753e475d4d77255b3ced6045da0dba4849fe63c3db37f7a99377d5ba6e8a90946a44ddd5fc

  • SSDEEP

    1536:zsXVOdM7weaygEoMxlJfM9bLn9hYZm9pISwYBzNOrJnlN:zXmU9bT9hN9SSpfOlX

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

act-freebsd.gl.at.ply.gg:54045

Attributes
  • install_file

    USB.exe

Targets

    • Target

      23.exe

    • Size

      75KB

    • MD5

      336d4d8bfa4a49a974720d89a6275a04

    • SHA1

      5d4b71b8d70dcf5bb4edf3e4d13daf325a9c34ea

    • SHA256

      c2d5c4a5a91be743ef7b4abdfb983343968f989d6dd86c686f2a1fc56393f380

    • SHA512

      edc58daf7298d9b264b81088551620cc48f10f96a1657cd3c21f67753e475d4d77255b3ced6045da0dba4849fe63c3db37f7a99377d5ba6e8a90946a44ddd5fc

    • SSDEEP

      1536:zsXVOdM7weaygEoMxlJfM9bLn9hYZm9pISwYBzNOrJnlN:zXmU9bT9hN9SSpfOlX

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm
    behavioral1

MITRE ATT&CK Matrix

Tasks