General

  • Target

    Vegaline Client CRACK 2024.exe

  • Size

    398KB

  • Sample

    240905-r3dlvasgnn

  • MD5

    6768b8d155a5156f39b9eedc6b8aee92

  • SHA1

    830a0cfbfc3f3c30a9cefc98ba2e68c65e93bc07

  • SHA256

    16d025f361b8232797902dcc6514881325ca301f62216cb86f8c5ad7b5bfee76

  • SHA512

    38ae1e7c3cb4f2241e9be4fdf643719950e602e8bec214dd41e313c5d54f26484bfecba649c755b7106f989fe50bc0689f483177f79bc18f2114aebe724e584f

  • SSDEEP

    6144:226iHeX9gpDxUC6eVy9QetdHZwJvJMxhnel93mdQoCX:h6UyIVjAFZwJxEh

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:7779

Mutex

lOBLbgBZB7YkQiyW

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      Vegaline Client CRACK 2024.exe

    • Size

      398KB

    • MD5

      6768b8d155a5156f39b9eedc6b8aee92

    • SHA1

      830a0cfbfc3f3c30a9cefc98ba2e68c65e93bc07

    • SHA256

      16d025f361b8232797902dcc6514881325ca301f62216cb86f8c5ad7b5bfee76

    • SHA512

      38ae1e7c3cb4f2241e9be4fdf643719950e602e8bec214dd41e313c5d54f26484bfecba649c755b7106f989fe50bc0689f483177f79bc18f2114aebe724e584f

    • SSDEEP

      6144:226iHeX9gpDxUC6eVy9QetdHZwJvJMxhnel93mdQoCX:h6UyIVjAFZwJxEh

    Score
    10/10
    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks