Overview

overview

10

Static

static

10

343352ecf7...1N.exe

windows7-x64

10

343352ecf7...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    343352ecf70fb1c3bcfc84f104a00e0b4f478ace9404ad19408eaa0a3fc9ffb1N

  • Size

    32KB

  • Sample

    241110-mrjaqsvhmc

  • MD5

    cc3ee91cf2de0d54009cbafd95f77510

  • SHA1

    11dbde141c54f722435e33e9c48eefa6161d0f75

  • SHA256

    343352ecf70fb1c3bcfc84f104a00e0b4f478ace9404ad19408eaa0a3fc9ffb1

  • SHA512

    b4580d0637e57a9448cc2126c8712c2a9cb035adf72764555b99bb897fd49eb078b1a4093e53df8f07b55ece89f71e24e8b5959c02b8ec54116860235222bddb

  • SSDEEP

    384:jlRmhGD91SluSWhnHHxzLmYg3Tm2eaFO4FzRApkFTBLTsOZwpGd2v99IkuisWVFR:5RPD9OQhx/Bg3Tw49FzVFE9jLOjhUbX

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

spyo365.zapto.org:2000

Mutex

TVTpH8LYZlkXkMd5

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      343352ecf70fb1c3bcfc84f104a00e0b4f478ace9404ad19408eaa0a3fc9ffb1N

    • Size

      32KB

    • MD5

      cc3ee91cf2de0d54009cbafd95f77510

    • SHA1

      11dbde141c54f722435e33e9c48eefa6161d0f75

    • SHA256

      343352ecf70fb1c3bcfc84f104a00e0b4f478ace9404ad19408eaa0a3fc9ffb1

    • SHA512

      b4580d0637e57a9448cc2126c8712c2a9cb035adf72764555b99bb897fd49eb078b1a4093e53df8f07b55ece89f71e24e8b5959c02b8ec54116860235222bddb

    • SSDEEP

      384:jlRmhGD91SluSWhnHHxzLmYg3Tm2eaFO4FzRApkFTBLTsOZwpGd2v99IkuisWVFR:5RPD9OQhx/Bg3Tw49FzVFE9jLOjhUbX

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks