General
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mega.nz/file/ORE0hbia#WUbaV7wkKeJGJn69jImU7sjH4ipqeEYEJ-XWS7JpkiY
Resource
win10v2004-20241007-en
windows10-2004-x64
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://mega.nz/file/ORE0hbia#WUbaV7wkKeJGJn69jImU7sjH4ipqeEYEJ-XWS7JpkiY
Resource
win10v2004-20241007-en
windows10-2004-x64
7 signatures
150 seconds
Malware Config
Extracted
Family
xworm
Version
5.0
C2
127.0.0.1:40193
table-services.gl.at.ply.gg:40193
Mutex
hwj3sOSYzsrtcnTJ
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
-
Target
https://mega.nz/file/ORE0hbia#WUbaV7wkKeJGJn69jImU7sjH4ipqeEYEJ-XWS7JpkiY
-
Detect Xworm Payload
-
Xworm family
-
Executes dropped EXE
-