Overview

overview

10

Static

static

10

75132eba41...b2.exe

windows7-x64

10

75132eba41...b2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75132eba416a8b2f4dbc9dc2c357d9fb5fef49d7b73332e924d99d6a71c0d8b2.exe

  • Size

    36KB

  • Sample

    250120-eb7dmazncj

  • MD5

    d9f0db6ad2f68a95ce03cbaa6817908c

  • SHA1

    819425ac6c810e1ac8f7419bef80152fac683a30

  • SHA256

    75132eba416a8b2f4dbc9dc2c357d9fb5fef49d7b73332e924d99d6a71c0d8b2

  • SHA512

    94f17fd2583f18fa08ba77d324b7ffc488320d924e8ae12479b279cd2ee0ed60f4287ba686552bf68f50be5c7256059213dff5b8bf0d7cedbd9d229af6cd5c85

  • SSDEEP

    768:DL13A5Uno9RfHWa2B71eo8icHyEWbFb9YUOMhLQXvbM:3xA5Uno9JHWXZeNicHyESFb9YUOMJ6bM

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

85.31.47.24:1888

Mutex

tlRBNCeyJJLJkXVL

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      75132eba416a8b2f4dbc9dc2c357d9fb5fef49d7b73332e924d99d6a71c0d8b2.exe

    • Size

      36KB

    • MD5

      d9f0db6ad2f68a95ce03cbaa6817908c

    • SHA1

      819425ac6c810e1ac8f7419bef80152fac683a30

    • SHA256

      75132eba416a8b2f4dbc9dc2c357d9fb5fef49d7b73332e924d99d6a71c0d8b2

    • SHA512

      94f17fd2583f18fa08ba77d324b7ffc488320d924e8ae12479b279cd2ee0ed60f4287ba686552bf68f50be5c7256059213dff5b8bf0d7cedbd9d229af6cd5c85

    • SSDEEP

      768:DL13A5Uno9RfHWa2B71eo8icHyEWbFb9YUOMhLQXvbM:3xA5Uno9JHWXZeNicHyESFb9YUOMJ6bM

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks