General

  • Target

    2.exe

  • Size

    55KB

  • Sample

    240329-a1ggaacg8z

  • MD5

    9274d872b7294049124747dbb05e56ce

  • SHA1

    6b3c598decc221acfcd2985e7855574df45fc5e8

  • SHA256

    a7d2aff91071cfd3963cbdfed0c8958e1fad7d1bbc9a12851d8166ed66529dcf

  • SHA512

    f1e1b6bba38f16ac169a422d5ada5fa66af569263a5ad729e3189d6feaf0c8b6346c410e5c1c08db1a8bc423b0701c3ce0b6baf625f4248f4f93ee757b2729e7

  • SSDEEP

    1536:xzqqmCdaddh7SkbXVFBGxPna1DOX5Vf3:xzOCdaLhGkbXVyVeDOX5F

Score
10/10

Malware Config

Extracted

Family

xworm

C2

94.6.233.124:1707

Attributes
  • install_file

    USB.exe

Targets

    • Target

      2.exe

    • Size

      55KB

    • MD5

      9274d872b7294049124747dbb05e56ce

    • SHA1

      6b3c598decc221acfcd2985e7855574df45fc5e8

    • SHA256

      a7d2aff91071cfd3963cbdfed0c8958e1fad7d1bbc9a12851d8166ed66529dcf

    • SHA512

      f1e1b6bba38f16ac169a422d5ada5fa66af569263a5ad729e3189d6feaf0c8b6346c410e5c1c08db1a8bc423b0701c3ce0b6baf625f4248f4f93ee757b2729e7

    • SSDEEP

      1536:xzqqmCdaddh7SkbXVFBGxPna1DOX5Vf3:xzOCdaLhGkbXVyVeDOX5F

    Score
    10/10
    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks