General

  • Target

    wdwdw.exe

  • Size

    52KB

  • Sample

    240329-ag4sgach92

  • MD5

    d7776decaf3b70e118d63ac2796db1bd

  • SHA1

    aaa923b53913ba05474bd3d5183b1abc53965282

  • SHA256

    e361493f37544243cf88c21519a1a0caafcd9bd8e329bfed1edf5bdb5ae8b8ef

  • SHA512

    1be21712ccb6455523b0ffd373786e88a60935d66bbfc27d935eb12cae17915cef1518aff0fb8c65749c9efe5ff0b43eb952f0a9f7a9bd4f7ec2989e6491db7b

  • SSDEEP

    768:A3vtMC4vIdB+ryQuOFip+AbWzqwZq9d+bsuaAkITd9MIzq/OYThdDpi:A3l6Y+rCsshCqw49YbVajCMf/OYTL1i

Score
10/10

Malware Config

Extracted

Family

xworm

C2

94.6.233.124:5004

Attributes
  • install_file

    USB.exe

Targets

    • Target

      wdwdw.exe

    • Size

      52KB

    • MD5

      d7776decaf3b70e118d63ac2796db1bd

    • SHA1

      aaa923b53913ba05474bd3d5183b1abc53965282

    • SHA256

      e361493f37544243cf88c21519a1a0caafcd9bd8e329bfed1edf5bdb5ae8b8ef

    • SHA512

      1be21712ccb6455523b0ffd373786e88a60935d66bbfc27d935eb12cae17915cef1518aff0fb8c65749c9efe5ff0b43eb952f0a9f7a9bd4f7ec2989e6491db7b

    • SSDEEP

      768:A3vtMC4vIdB+ryQuOFip+AbWzqwZq9d+bsuaAkITd9MIzq/OYThdDpi:A3l6Y+rCsshCqw49YbVajCMf/OYTL1i

    Score
    10/10
    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks