Overview

overview

10

Static

static

10

maneboom.lol.exe

windows7-x64

10

maneboom.lol.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    maneboom.lol.exe

  • Size

    37KB

  • Sample

    250121-dblaqaspav

  • MD5

    81acac228ff7a8517a412e6245858207

  • SHA1

    72f74222ce6a5b318e91c4d800fbe35b5d043efa

  • SHA256

    c0a3b455ffd6b8230eebdc5947503a1c0adcd3060e1688396221e6345dd3d1f3

  • SHA512

    c22a3913eb55375c4d6e47777e476b0d1a5b2c5d37d1022eb41d2380ac457b894f8476414fe1c04098a5c031feed5f08267855055f7a45fd74f77b2dee6eea97

  • SSDEEP

    768:Yb/VWkohmnw4+8dFyZ9F1Oi5OjhxSJXck:Y7Vrmmw4ZFo9Fki5OjnI7

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

put-responses.gl.at.ply.gg:54807

Mutex

AooHjMQio8yNpEpc

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      maneboom.lol.exe

    • Size

      37KB

    • MD5

      81acac228ff7a8517a412e6245858207

    • SHA1

      72f74222ce6a5b318e91c4d800fbe35b5d043efa

    • SHA256

      c0a3b455ffd6b8230eebdc5947503a1c0adcd3060e1688396221e6345dd3d1f3

    • SHA512

      c22a3913eb55375c4d6e47777e476b0d1a5b2c5d37d1022eb41d2380ac457b894f8476414fe1c04098a5c031feed5f08267855055f7a45fd74f77b2dee6eea97

    • SSDEEP

      768:Yb/VWkohmnw4+8dFyZ9F1Oi5OjhxSJXck:Y7Vrmmw4ZFo9Fki5OjnI7

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks