Overview

overview

10

Static

static

10

e601ec5391...dN.exe

windows7-x64

10

e601ec5391...dN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e601ec53911e1d8939818dc66deff0fbb4b4a85bec8c1784bc532495388239ddN.exe

  • Size

    59KB

  • Sample

    250119-zbfwwsvkbz

  • MD5

    c3c3cedecc0a3f4abcc362edd7ba12d0

  • SHA1

    50c30062c0fb204e81723d88e05a8208cea79e16

  • SHA256

    e601ec53911e1d8939818dc66deff0fbb4b4a85bec8c1784bc532495388239dd

  • SHA512

    470f5ae4e6ba684b38ed9095a54a61de3cca9d551fa82fce2f1994112f96b405041ba99045a2e97991243839f2f7f5c23753c8845830a3965424eec93e0ce436

  • SSDEEP

    1536:GYdzPAcTtnU2kqL2okb1cR5ovB+NNJGgqO89ogO:GYFddU2kqTkb1juqzO89o/

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:8888

Attributes
  • install_file

    USB.exe

Targets

    • Target

      e601ec53911e1d8939818dc66deff0fbb4b4a85bec8c1784bc532495388239ddN.exe

    • Size

      59KB

    • MD5

      c3c3cedecc0a3f4abcc362edd7ba12d0

    • SHA1

      50c30062c0fb204e81723d88e05a8208cea79e16

    • SHA256

      e601ec53911e1d8939818dc66deff0fbb4b4a85bec8c1784bc532495388239dd

    • SHA512

      470f5ae4e6ba684b38ed9095a54a61de3cca9d551fa82fce2f1994112f96b405041ba99045a2e97991243839f2f7f5c23753c8845830a3965424eec93e0ce436

    • SSDEEP

      1536:GYdzPAcTtnU2kqL2okb1cR5ovB+NNJGgqO89ogO:GYFddU2kqTkb1juqzO89o/

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks