General

  • Target

    17377014056a69536ab12b0f859a66de89b12706e344abb5fe3544307ca437beeb04f04531790.dat-decoded.exe

  • Size

    36KB

  • Sample

    250124-hmg5naxjbl

  • MD5

    648c182e090bbda47f228fb15eaa7daa

  • SHA1

    5c6b5a0f89b91cee34112357979202633b787490

  • SHA256

    ba2596817b32f9dfc9358119e4a294b5673cefe55b991ce49d94f36b79c7268a

  • SHA512

    2dcd49dde2294b6b41c90befda6144bcbae610d660d51b009770fcc2edd923bbb078dde9b569d76ea4fd5ffa9c3072ff66dedae52fc7e1da27d13516890597f5

  • SSDEEP

    768:zL13A5Uno9RfHWa2B71eo8icHyEWbFb9Y2OMhrQXvc:nxA5Uno9JHWXZeNicHyESFb9Y2OMd6c

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

85.31.47.24:1888

Mutex

KYDPmLKQ1YuSniXQ

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      17377014056a69536ab12b0f859a66de89b12706e344abb5fe3544307ca437beeb04f04531790.dat-decoded.exe

    • Size

      36KB

    • MD5

      648c182e090bbda47f228fb15eaa7daa

    • SHA1

      5c6b5a0f89b91cee34112357979202633b787490

    • SHA256

      ba2596817b32f9dfc9358119e4a294b5673cefe55b991ce49d94f36b79c7268a

    • SHA512

      2dcd49dde2294b6b41c90befda6144bcbae610d660d51b009770fcc2edd923bbb078dde9b569d76ea4fd5ffa9c3072ff66dedae52fc7e1da27d13516890597f5

    • SSDEEP

      768:zL13A5Uno9RfHWa2B71eo8icHyEWbFb9Y2OMhrQXvc:nxA5Uno9JHWXZeNicHyESFb9Y2OMd6c

    Score
    10/10
    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

    • Xworm family

MITRE ATT&CK Matrix

Tasks