Overview

overview

10

Static

static

10

3d90aaded3...bc.exe

windows7-x64

10

3d90aaded3...bc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d90aaded37f55ad3fdf422173469eb1d953b2697c125588efec8aed3150c0bc.exe

  • Size

    33KB

  • Sample

    240514-qyrggahd6x

  • MD5

    3e57bce31b75cde10918b41219b2b229

  • SHA1

    7418e38d43815d871dcec73a824da23f9901a57e

  • SHA256

    3d90aaded37f55ad3fdf422173469eb1d953b2697c125588efec8aed3150c0bc

  • SHA512

    5fd3bbb6f75cc198c6c1cfd3c29ecfade2edf282592efc909b6c2c65c4de759791b4719ef825bc3bd5235c504a1a2e4fc646766a8e6e08b3cb06219ab36b02e3

  • SSDEEP

    384:Ll+PkjD9+E5MFs7iui8L7zKM42pfL3iB7OxVqW0RApkFXBLTsOZwpGN2v99Ikuix:B+CD93W03v42JiB70uVF49jZxOjhybp

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

nodetecton.duckdns.org:7000

Mutex

vNdCvtlIV5HF9ZNn

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      3d90aaded37f55ad3fdf422173469eb1d953b2697c125588efec8aed3150c0bc.exe

    • Size

      33KB

    • MD5

      3e57bce31b75cde10918b41219b2b229

    • SHA1

      7418e38d43815d871dcec73a824da23f9901a57e

    • SHA256

      3d90aaded37f55ad3fdf422173469eb1d953b2697c125588efec8aed3150c0bc

    • SHA512

      5fd3bbb6f75cc198c6c1cfd3c29ecfade2edf282592efc909b6c2c65c4de759791b4719ef825bc3bd5235c504a1a2e4fc646766a8e6e08b3cb06219ab36b02e3

    • SSDEEP

      384:Ll+PkjD9+E5MFs7iui8L7zKM42pfL3iB7OxVqW0RApkFXBLTsOZwpGN2v99Ikuix:B+CD93W03v42JiB70uVF49jZxOjhybp

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks