Overview

overview

10

Static

static

10

.exe

windows7-x64

10

.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    .exe

  • Size

    40KB

  • Sample

    250118-vtaelszndq

  • MD5

    2d83ffb1a05be44cad752f38417c9dd2

  • SHA1

    f00654018773b78eaa63945963fa458b6770b923

  • SHA256

    ea51932b361cef7f72f9215bfe0643893034d012e8a7175a052c670766375891

  • SHA512

    c76aac50b3d9ddb80e558269c6045ce1e25646cd934d4a9aece6079fac486f5cb57ddf02458f4163287ba9d9f0ce1bcbf4173a98276a771855e676e56d5849ca

  • SSDEEP

    768:TERUFPu4riNqCwWzkSRs0RpPw9XsQhLO4uekM:Ta40NdPwp1ObekM

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

employment-audience.gl.at.ply.gg:18358:1111

Mutex

zazrSXbaPKZmoJfB

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      .exe

    • Size

      40KB

    • MD5

      2d83ffb1a05be44cad752f38417c9dd2

    • SHA1

      f00654018773b78eaa63945963fa458b6770b923

    • SHA256

      ea51932b361cef7f72f9215bfe0643893034d012e8a7175a052c670766375891

    • SHA512

      c76aac50b3d9ddb80e558269c6045ce1e25646cd934d4a9aece6079fac486f5cb57ddf02458f4163287ba9d9f0ce1bcbf4173a98276a771855e676e56d5849ca

    • SSDEEP

      768:TERUFPu4riNqCwWzkSRs0RpPw9XsQhLO4uekM:Ta40NdPwp1ObekM

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks