Overview

overview

10

Static

static

10

abd28288c2...6d.exe

windows7-x64

10

abd28288c2...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abd28288c2f4dc2eb44b6940309c5dd772124d0fedab0664ff9d5dae6eb1506d.exe

  • Size

    33KB

  • Sample

    241114-x7sjfsscpf

  • MD5

    4618efc13211a682b44c248326ed914a

  • SHA1

    834d45aa57691327e896c485bd6d72c0a79680a2

  • SHA256

    abd28288c2f4dc2eb44b6940309c5dd772124d0fedab0664ff9d5dae6eb1506d

  • SHA512

    3d257358cbc270a04eb9e29c5b602e8af460d0eea2358315a40a0a0dd1f63c41703d8d51dc13c642cb09f11be219bd5669618fd08dbf8be2d54055740b9a445e

  • SSDEEP

    768:eXGQHJVcAiwkFwYqimZoVFY9jaOjhSbp:MGQH9kSqm0FY9jaOjgd

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

yourself-member.gl.at.ply.gg:6852

yourself-member.gl.at.ply.gg:51770:6852
Mutex

WSylgOpSlNAMV60k

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      abd28288c2f4dc2eb44b6940309c5dd772124d0fedab0664ff9d5dae6eb1506d.exe

    • Size

      33KB

    • MD5

      4618efc13211a682b44c248326ed914a

    • SHA1

      834d45aa57691327e896c485bd6d72c0a79680a2

    • SHA256

      abd28288c2f4dc2eb44b6940309c5dd772124d0fedab0664ff9d5dae6eb1506d

    • SHA512

      3d257358cbc270a04eb9e29c5b602e8af460d0eea2358315a40a0a0dd1f63c41703d8d51dc13c642cb09f11be219bd5669618fd08dbf8be2d54055740b9a445e

    • SSDEEP

      768:eXGQHJVcAiwkFwYqimZoVFY9jaOjhSbp:MGQH9kSqm0FY9jaOjgd

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks