Overview

overview

10

Static

static

10

fdsfsdfsdfsdfsdf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdsfsdfsdfsdfsdf.exe

  • Size

    32KB

  • Sample

    241231-w6cwyasrez

  • MD5

    fd1fe2c3fff716da396585745184239a

  • SHA1

    17678114e2f00150fc0396a21a5f56039674442b

  • SHA256

    54401081fdecb5942fa0ea30c2786adfb6d0e7542f4fb92e5f3b05a5cb4a41c6

  • SHA512

    ac1ae714b6d5b099ea7e89fb8b7e8277f41716e37499fee0c11abbdba9aa1f1f67abedabb065338fbee86985ad2599edc9cc986217541f847ba64c940cb8d50d

  • SSDEEP

    384:olRmhGD91SluSWhnHHxzLmY83Tm2eaFO4FzRApkFTBLTsOZwpGd2v99Ikuis6VFZ:8RPD9OQhx/B83Tw49FzVFE9jXOjhFbQ

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

kit-enrollment.gl.at.ply.gg:55332

Mutex

WyKqIy3Q8mXaWB8O

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      fdsfsdfsdfsdfsdf.exe

    • Size

      32KB

    • MD5

      fd1fe2c3fff716da396585745184239a

    • SHA1

      17678114e2f00150fc0396a21a5f56039674442b

    • SHA256

      54401081fdecb5942fa0ea30c2786adfb6d0e7542f4fb92e5f3b05a5cb4a41c6

    • SHA512

      ac1ae714b6d5b099ea7e89fb8b7e8277f41716e37499fee0c11abbdba9aa1f1f67abedabb065338fbee86985ad2599edc9cc986217541f847ba64c940cb8d50d

    • SSDEEP

      384:olRmhGD91SluSWhnHHxzLmY83Tm2eaFO4FzRApkFTBLTsOZwpGd2v99Ikuis6VFZ:8RPD9OQhx/B83Tw49FzVFE9jXOjhFbQ

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1

MITRE ATT&CK Matrix

Tasks