Overview

overview

10

Static

static

10

b8abd3a873...57.exe

windows7-x64

10

b8abd3a873...57.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8abd3a87339e1aea8fa843c4f9c2bfb55a870d28650222ca06b482795022357

  • Size

    325KB

  • Sample

    241101-ynnxlavbmf

  • MD5

    d1552f8c6ea1a4e0f1c7d77190f70468

  • SHA1

    b0e34de1d0fb1c1facdb84c528c72753efbade51

  • SHA256

    b8abd3a87339e1aea8fa843c4f9c2bfb55a870d28650222ca06b482795022357

  • SHA512

    ee3a3b13c95dfec14904aaabc8afa12aeccb3dd66e5d2726c36308c471f20f46aa96e88fe3a69099025d016347271a4b53ab6798701f40cc357e96862fd31474

  • SSDEEP

    6144:DibyzpibBI+GIIIIIIIhIIIIIIIIIIIIIIIU:DibwS

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

157.66.26.208:8848

Attributes
  • install_file

    USB.exe

Targets

    • Target

      b8abd3a87339e1aea8fa843c4f9c2bfb55a870d28650222ca06b482795022357

    • Size

      325KB

    • MD5

      d1552f8c6ea1a4e0f1c7d77190f70468

    • SHA1

      b0e34de1d0fb1c1facdb84c528c72753efbade51

    • SHA256

      b8abd3a87339e1aea8fa843c4f9c2bfb55a870d28650222ca06b482795022357

    • SHA512

      ee3a3b13c95dfec14904aaabc8afa12aeccb3dd66e5d2726c36308c471f20f46aa96e88fe3a69099025d016347271a4b53ab6798701f40cc357e96862fd31474

    • SSDEEP

      6144:DibyzpibBI+GIIIIIIIhIIIIIIIIIIIIIIIU:DibwS

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks