Overview

overview

10

Static

static

10

74a741bc82...85.exe

windows7-x64

10

74a741bc82...85.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74a741bc82a1dfd63433d64999ea159987b848183b89a6aac3c4ff10a6d26885.exe

  • Size

    32KB

  • Sample

    241103-dh4qmstbrq

  • MD5

    7d2a1ef1f9df2fc7e2c2a48018df18ad

  • SHA1

    e55632b6b51fdf3663beaad68069bb8ef532ba88

  • SHA256

    74a741bc82a1dfd63433d64999ea159987b848183b89a6aac3c4ff10a6d26885

  • SHA512

    7140d9c4080f2e1f11225f8bf8e6e82c539a24881abb3a01a760adc384faf772f8623c8c4e8bd7a3c113330761864631dcbe9697529d23e81624f84267951c23

  • SSDEEP

    384:+lRmhGD91SluSWhnHHxzLmY73Tm2eaFO4FzRApkFTBLTsOZwpGd2v99IkuisKK9M:eRPD9OQhx/B73Tw49FzVFE9jCOjhXbX

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

products-profit.gl.at.ply.gg:36450

Mutex

4s4X91Qf4LTgCiRy

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      74a741bc82a1dfd63433d64999ea159987b848183b89a6aac3c4ff10a6d26885.exe

    • Size

      32KB

    • MD5

      7d2a1ef1f9df2fc7e2c2a48018df18ad

    • SHA1

      e55632b6b51fdf3663beaad68069bb8ef532ba88

    • SHA256

      74a741bc82a1dfd63433d64999ea159987b848183b89a6aac3c4ff10a6d26885

    • SHA512

      7140d9c4080f2e1f11225f8bf8e6e82c539a24881abb3a01a760adc384faf772f8623c8c4e8bd7a3c113330761864631dcbe9697529d23e81624f84267951c23

    • SSDEEP

      384:+lRmhGD91SluSWhnHHxzLmY73Tm2eaFO4FzRApkFTBLTsOZwpGd2v99IkuisKK9M:eRPD9OQhx/B73Tw49FzVFE9jCOjhXbX

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks