Overview

overview

10

Static

static

3

DREAM ADVE...ER.exe

windows7-x64

1

DREAM ADVE...ER.exe

windows10-1703-x64

10

DREAM ADVE...ER.exe

windows10-2004-x64

10

DREAM ADVE...ER.exe

windows11-21h2-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    DREAM ADVENCED v1.0 LOADER.exe
  • Size 50KB
  • Sample240620-mtzeqstaph
  • SHA256 78fc041bb6cd457c95ea9c48d4c0f8cfff3fc1e536b2a4b95f8c0a831306d7a3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

  • xworm

Attributes
  • install_file

    wintousb.exe

Targets

    • Target
      DREAM ADVENCED v1.0 LOADER.exe
    • Size 50KB
    • SHA256 78fc041bb6cd457c95ea9c48d4c0f8cfff3fc1e536b2a4b95f8c0a831306d7a3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks