General

  • Target

    2024-11-19_80c6ecb0c6917d279942a3afb12da18c_hiddentear

  • Size

    167KB

  • Sample

    241119-s61q8axnet

  • MD5

    80c6ecb0c6917d279942a3afb12da18c

  • SHA1

    235a3a0d66d249ff9fcabe64e1c666a84c304592

  • SHA256

    bc9c3b5ab2fee57ec7a40f5cb8acdf9b119433b1cbeebfbf237a632a59a0be08

  • SHA512

    cdf930be6a3ad432caef98e9b3e5e3ea8625bcf39592527cc8642bdc1a7f0f1640133afed238843ce5f8bb8dafc384885efa4e7b43220e68a539f791e188be59

  • SSDEEP

    3072:gME9Qkh/HMbE7R14gozOjVZ3M+lmsolAIrRuw+mqv9j1MWLQ+:+QkkbwXU+lDAA

Score
10/10

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • install_file

    USB.exe

Targets

    • Target

      2024-11-19_80c6ecb0c6917d279942a3afb12da18c_hiddentear

    • Size

      167KB

    • MD5

      80c6ecb0c6917d279942a3afb12da18c

    • SHA1

      235a3a0d66d249ff9fcabe64e1c666a84c304592

    • SHA256

      bc9c3b5ab2fee57ec7a40f5cb8acdf9b119433b1cbeebfbf237a632a59a0be08

    • SHA512

      cdf930be6a3ad432caef98e9b3e5e3ea8625bcf39592527cc8642bdc1a7f0f1640133afed238843ce5f8bb8dafc384885efa4e7b43220e68a539f791e188be59

    • SSDEEP

      3072:gME9Qkh/HMbE7R14gozOjVZ3M+lmsolAIrRuw+mqv9j1MWLQ+:+QkkbwXU+lDAA

    Score
    10/10
    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

    • Xworm family

MITRE ATT&CK Matrix

Tasks