Overview

overview

10

Static

static

3

3c15ad7d87...fc.exe

windows7-x64

10

3c15ad7d87...fc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c15ad7d87d745c85329bea741a39952288bd6432bf376b6d8404026d70925fc.exe

  • Size

    88KB

  • Sample

    240705-fltqysshpm

  • MD5

    2754f2c1b905c6f382bc18f10ca84220

  • SHA1

    f14be7d64ae1c53b6158a36a3c36ddfbc028f16b

  • SHA256

    3c15ad7d87d745c85329bea741a39952288bd6432bf376b6d8404026d70925fc

  • SHA512

    fc01c8596804c0b23a3b4cbec3aa7f980e557cf8b326329ee5d20bdd260befd8b34d2f5249bc2c6f7b798258f30bbad45826d8e1684fc4708a74dd3881bd0127

  • SSDEEP

    1536:Q7JQIkawLJJkxWZ6sh6I8/7MOLwuUStWHqQeN8kOhpi/:6JQPQw+/7brNtWKQeGNv

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

3.1

C2

127.0.0.1:7000

Attributes
  • install_file

    USB.exe

Targets

    • Target

      3c15ad7d87d745c85329bea741a39952288bd6432bf376b6d8404026d70925fc.exe

    • Size

      88KB

    • MD5

      2754f2c1b905c6f382bc18f10ca84220

    • SHA1

      f14be7d64ae1c53b6158a36a3c36ddfbc028f16b

    • SHA256

      3c15ad7d87d745c85329bea741a39952288bd6432bf376b6d8404026d70925fc

    • SHA512

      fc01c8596804c0b23a3b4cbec3aa7f980e557cf8b326329ee5d20bdd260befd8b34d2f5249bc2c6f7b798258f30bbad45826d8e1684fc4708a74dd3881bd0127

    • SSDEEP

      1536:Q7JQIkawLJJkxWZ6sh6I8/7MOLwuUStWHqQeN8kOhpi/:6JQPQw+/7brNtWKQeGNv

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks