General

  • Target

    nigger sex.exe

  • Size

    32KB

  • Sample

    250123-nn2hksznaj

  • MD5

    cac510a072cd3e80ca309f7442f5a326

  • SHA1

    0f52da782525d5ae582baac9ceb6739589c21c70

  • SHA256

    8a9c7a385608b74b8f777197ae9323b6af5be09e9346b934369b72c899d8e45b

  • SHA512

    6539c689f7e30c42aa3c478d0a41a10844c1aa4b710a28d4541741da8da77b5f2e9d75eb86442a1d248de2b9bf0e72ceca6e18bdaa46dc71921fcec8dc489bb8

  • SSDEEP

    384:7EbmX5Qa+vN1h1+X3v6JFjL+g93Tm2eaFODZzRApkFTBLTsOZwpGd2v99Ikuis8g:IVa+vNtg+PB93Tw42ZzVFE9jNOjhvbb

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:4455

Mutex

23k5TWNO4gMENG8H

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      nigger sex.exe

    • Size

      32KB

    • MD5

      cac510a072cd3e80ca309f7442f5a326

    • SHA1

      0f52da782525d5ae582baac9ceb6739589c21c70

    • SHA256

      8a9c7a385608b74b8f777197ae9323b6af5be09e9346b934369b72c899d8e45b

    • SHA512

      6539c689f7e30c42aa3c478d0a41a10844c1aa4b710a28d4541741da8da77b5f2e9d75eb86442a1d248de2b9bf0e72ceca6e18bdaa46dc71921fcec8dc489bb8

    • SSDEEP

      384:7EbmX5Qa+vN1h1+X3v6JFjL+g93Tm2eaFODZzRApkFTBLTsOZwpGd2v99Ikuis8g:IVa+vNtg+PB93Tw42ZzVFE9jNOjhvbb

    Score
    10/10
    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

    • Xworm family

MITRE ATT&CK Enterprise v15

Tasks