General

  • Target

    dwdadwdwdwd.exe

  • Size

    44KB

  • Sample

    240329-af8p2acc5w

  • MD5

    4f62cc442abeafa28e7c3f739c57af96

  • SHA1

    65241b97f9a3b4611029c96988e984db150a0736

  • SHA256

    2df6920ecb9cc4ed33fcb4ed91e6feb75b2697f4036feea862e461612a3fe642

  • SHA512

    864d643935a31aca70f59d51ecb21ed7bb314bc6e48840aa45ff1ac5a630b288313288614f8c552e5a60f04f71a6d9808383e216bfcf476ac45929c9a8bf161c

  • SSDEEP

    768:xtAbfFuROha3LPKe98D+07eEsRgkbfVFNh4BZOhhHap8pI:ncuoUSes8+kbfVZ4rOhFQ8I

Score
10/10

Malware Config

Extracted

Family

xworm

C2

192.168.0.7:5004:5004

Attributes
  • install_file

    USB.exe

Targets

    • Target

      dwdadwdwdwd.exe

    • Size

      44KB

    • MD5

      4f62cc442abeafa28e7c3f739c57af96

    • SHA1

      65241b97f9a3b4611029c96988e984db150a0736

    • SHA256

      2df6920ecb9cc4ed33fcb4ed91e6feb75b2697f4036feea862e461612a3fe642

    • SHA512

      864d643935a31aca70f59d51ecb21ed7bb314bc6e48840aa45ff1ac5a630b288313288614f8c552e5a60f04f71a6d9808383e216bfcf476ac45929c9a8bf161c

    • SSDEEP

      768:xtAbfFuROha3LPKe98D+07eEsRgkbfVFNh4BZOhhHap8pI:ncuoUSes8+kbfVZ4rOhFQ8I

    Score
    10/10
    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks