General

  • Target

    2024-10-12_4ebb32a47841ad130e28ffc250431ed9_hiddentear

  • Size

    130KB

  • Sample

    241012-jp55ya1bmb

  • MD5

    4ebb32a47841ad130e28ffc250431ed9

  • SHA1

    4538694b94fa6a44f7ba7a488ca69fd50fe35517

  • SHA256

    d4d58f8a432f4376b87e9e0ad1c1d19c9f4b43ad5559e55db900389eeaf12315

  • SHA512

    e30fd0a0afd00c00b5472ad05ae47926c4e69dac07de53605b71a7a35362b64dc92751ffe8ce4858b7e8f5ebf624bf8a36e6d5e2d46621f5b7e650449f483ff9

  • SSDEEP

    3072:YvNY/pFE9jLOjdM+lmsolAIrRuw+mqv9j1MWLQI:k8E97+lDAA

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

147.185.221.22:25435

Mutex

ED54LNUE65CRusCK

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      2024-10-12_4ebb32a47841ad130e28ffc250431ed9_hiddentear

    • Size

      130KB

    • MD5

      4ebb32a47841ad130e28ffc250431ed9

    • SHA1

      4538694b94fa6a44f7ba7a488ca69fd50fe35517

    • SHA256

      d4d58f8a432f4376b87e9e0ad1c1d19c9f4b43ad5559e55db900389eeaf12315

    • SHA512

      e30fd0a0afd00c00b5472ad05ae47926c4e69dac07de53605b71a7a35362b64dc92751ffe8ce4858b7e8f5ebf624bf8a36e6d5e2d46621f5b7e650449f483ff9

    • SSDEEP

      3072:YvNY/pFE9jLOjdM+lmsolAIrRuw+mqv9j1MWLQI:k8E97+lDAA

    Score
    10/10
    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks