Resubmissions

11-11-2024 19:49

241111-yj68dayjak 10

11-11-2024 19:46

241111-yhassaxrel 7

General

  • Target

    https://gofile.io/d/zLixM6

  • Sample

    241111-yj68dayjak

Malware Config

Targets

    • Target

      https://gofile.io/d/zLixM6

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

    • Xworm family

    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks