Overview

overview

10

Static

static

10

CommandX.exe

windows7-x64

10

CommandX.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CommandX.exe

  • Size

    59KB

  • Sample

    240420-vtdf9sdd95

  • MD5

    d20dbb6cb7746cf235eb4e9121954ee3

  • SHA1

    eff34ddaa81c20f4794edc1ef339adce0b57a1e7

  • SHA256

    73b1d875cd4951aa194194f5140dbc8ac11b3814c6fcb30ab4a0a623cc607101

  • SHA512

    6de89b3bd94031f0cad401d722dcdff13c8690ecc429a87e087e09ba4acd914fe003f0d79115aa99c01da345e7042c79dfa1b16f323717a0d8e01d9aedef09bf

  • SSDEEP

    768:eMUgff8OvL+FVtpLq1TLxxoYWTzRrgVhP+bmrV6GebiLLRzO8rjh+LjTyuZ:0gffnqjt0nxxoYSxY+bmrVwolO20fnZ

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • install_file

    USB.exe

Targets

    • Target

      CommandX.exe

    • Size

      59KB

    • MD5

      d20dbb6cb7746cf235eb4e9121954ee3

    • SHA1

      eff34ddaa81c20f4794edc1ef339adce0b57a1e7

    • SHA256

      73b1d875cd4951aa194194f5140dbc8ac11b3814c6fcb30ab4a0a623cc607101

    • SHA512

      6de89b3bd94031f0cad401d722dcdff13c8690ecc429a87e087e09ba4acd914fe003f0d79115aa99c01da345e7042c79dfa1b16f323717a0d8e01d9aedef09bf

    • SSDEEP

      768:eMUgff8OvL+FVtpLq1TLxxoYWTzRrgVhP+bmrV6GebiLLRzO8rjh+LjTyuZ:0gffnqjt0nxxoYSxY+bmrVwolO20fnZ

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks