Overview

overview

10

Static

static

10

34343.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    34343.rar

  • Size

    61KB

  • Sample

    240427-29vttaag64

  • MD5

    47ef7340495466f124d5f48aea6b2d5e

  • SHA1

    57477f4bb3b0e364705dcd2b9b52a16bedb83226

  • SHA256

    7f93aaedcf0185373266c8c4e710eef2716641ebb241d68c80f33e525c448e5c

  • SHA512

    f130306b9152546e6307594d2b0087433aca898b0925714e8911ce45d94e94fda44d9426bce2790fa91e57058e7fce0b79d4d09690a9cf50c7aa32450ff5e1d6

  • SSDEEP

    1536:iljxJUgBdbm6E12bDZ4L5vA/XrZMqxniCTMfysMHE/v:0DUgn7xt/XrZnniCwftf/v

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

3.1

C2

dffsdfsdfe434334.bounceme.net:7000

Attributes
  • install_file

    USB.exe

Targets

    • Target

      34343.exe

    • Size

      168KB

    • MD5

      9b5c4a6eb426547f25b2055958f48655

    • SHA1

      07dfd8eedf365dfd988b685feb5ad42889b27e87

    • SHA256

      83bfd94ce2f17c995d11f4ec8e419c939184bea281139432b16b41467dbd8ddf

    • SHA512

      cb736bd251e9ed9af134d7f9d5e483282227f3ab24a33c66f3e9ce7863678880b50d75cb1ab14a4635d7e1122c8cf2a05ebc6376b1e84247a52410f191c501f7

    • SSDEEP

      3072:E0W1Czzb14m1QwOmw4NpVq8BxFRzaqF+o2GQJ7/JzqVfGvL:E0VbSTgVqwlL

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm
    behavioral1

MITRE ATT&CK Matrix

Tasks