Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://gofile.io/d/...

windows10-2004-x64

10

Resubmissions

11-11-2024 19:49

241111-yj68dayjak 10

11-11-2024 19:46

241111-yhassaxrel 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://gofile.io/d/zLixM6

  • Sample

    241111-yj68dayjak

Score
10/10
xwormagilenetdiscoveryrattrojan

Malware Config

Targets

    • Target

      https://gofile.io/d/zLixM6

    Score
    10/10
    xwormagilenetdiscoveryrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm

    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • Uses the VBS compiler for execution

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks