General

  • Target

    b5eda42abb5bf9aae5d4f0b20ba10d02cdb80c061d03cd22cd64c6d15156c129

  • Size

    32KB

  • Sample

    241115-sxz4bszpbk

  • MD5

    24e8e41775d96bc50742d819eea8d8b1

  • SHA1

    46035eb78db2240660ef29d8d7c245a0af4acc4f

  • SHA256

    b5eda42abb5bf9aae5d4f0b20ba10d02cdb80c061d03cd22cd64c6d15156c129

  • SHA512

    4b0b67a15027e8c4a70fdb66246d7a3ef184cf2b3b0189ff6fa77c1b8393c43930d8b1b66b7035a13e8d9637787a2d8024069a94645aa1798de3ecbf11949da5

  • SSDEEP

    768:AVa+vNtg+PB93Tw4dOdVFE9jUqOjhvb0:qvNtgw93U4dAFE9jJOjBo

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

191.96.224.174:7000

Mutex

GhpgNLjmxlrMtYOM

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      b5eda42abb5bf9aae5d4f0b20ba10d02cdb80c061d03cd22cd64c6d15156c129

    • Size

      32KB

    • MD5

      24e8e41775d96bc50742d819eea8d8b1

    • SHA1

      46035eb78db2240660ef29d8d7c245a0af4acc4f

    • SHA256

      b5eda42abb5bf9aae5d4f0b20ba10d02cdb80c061d03cd22cd64c6d15156c129

    • SHA512

      4b0b67a15027e8c4a70fdb66246d7a3ef184cf2b3b0189ff6fa77c1b8393c43930d8b1b66b7035a13e8d9637787a2d8024069a94645aa1798de3ecbf11949da5

    • SSDEEP

      768:AVa+vNtg+PB93Tw4dOdVFE9jUqOjhvb0:qvNtgw93U4dAFE9jJOjBo

    Score
    10/10
    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

    • Xworm family

MITRE ATT&CK Matrix

Tasks