General

  • Target

    https://github.com/PeszoK/XWorm-Remote-Access-Tool/releases/tag/v5.0

  • Sample

    240525-1kldeabd9w

Score
8/10

Malware Config

Targets

    • Target

      https://github.com/PeszoK/XWorm-Remote-Access-Tool/releases/tag/v5.0

    Score
    8/10
    • Blocklisted process makes network request

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks