Overview

overview

10

Static

static

10

ef9d2831cf...e3.exe

windows7-x64

10

ef9d2831cf...e3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef9d2831cf11c271df7db118c74a9322c6f0d362eab3d57749906654c7858be3.exe

  • Size

    33KB

  • Sample

    241114-x132lsvrdq

  • MD5

    f1be2ff81227658111d7bb0900d87d82

  • SHA1

    8416a9811e0a83343c13387a55b2d72fc666a994

  • SHA256

    ef9d2831cf11c271df7db118c74a9322c6f0d362eab3d57749906654c7858be3

  • SHA512

    622f30331713d3c4fa4fcc9963c1b52ff0f263802c936e3c669b1b4650c6b9134207df6c97d7dc5940257565acf3d8dabf0d040c16ee9c4b205f6e74d275ed52

  • SSDEEP

    384:sEP7LGQ6ZXd0UmrpLSmPM42pfL3iB7OxVqWGRApkFXBLTsOZwpGN2v99Ikuisz86:pXGQ+OVXU42JiB70cVF49jA8dOjhIb4

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

research-was.gl.at.ply.gg:58470:3582

research-was.gl.at.ply.gg:3582
Mutex

oP3gVU2CgTGfE7IK

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      ef9d2831cf11c271df7db118c74a9322c6f0d362eab3d57749906654c7858be3.exe

    • Size

      33KB

    • MD5

      f1be2ff81227658111d7bb0900d87d82

    • SHA1

      8416a9811e0a83343c13387a55b2d72fc666a994

    • SHA256

      ef9d2831cf11c271df7db118c74a9322c6f0d362eab3d57749906654c7858be3

    • SHA512

      622f30331713d3c4fa4fcc9963c1b52ff0f263802c936e3c669b1b4650c6b9134207df6c97d7dc5940257565acf3d8dabf0d040c16ee9c4b205f6e74d275ed52

    • SSDEEP

      384:sEP7LGQ6ZXd0UmrpLSmPM42pfL3iB7OxVqWGRApkFXBLTsOZwpGN2v99Ikuisz86:pXGQ+OVXU42JiB70cVF49jA8dOjhIb4

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks