General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
xworm
Version
5.0
C2
87.120.116.179:1300
Mutex
aMI0xjUDQCeZl19j
Attributes
-
install_file
USB.exe
aes.plain
Targets
-
-
Target
https://docs.google.com/uc?export=download&id=139lsOJyvZG951FSn5PZuE4fXdeWVgxW_&data=05
-
Detect Xworm Payload
-
Xworm family
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-