Overview

overview

10

Static

static

10

4dc4a9ba43...fb.exe

windows7-x64

10

4dc4a9ba43...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4dc4a9ba4333732819395bbef22584fb.exe

  • Size

    51KB

  • Sample

    250125-thcj6azmft

  • MD5

    4dc4a9ba4333732819395bbef22584fb

  • SHA1

    2afd5bc52aa4308095ccc6149a184b37ed5824a1

  • SHA256

    b9321acd5582848dd946117d94aa70d3ae1f3a7a51971a13a7ceb0aad4199d6a

  • SHA512

    cebda37fe16f86b72da8d23bf0bc0b7ce8ca23c35607d355bc15bf5e890e67f9cdc4429a54f8cc5b569da19d0fd1a655c9f027cbf820700cd095d33591c59d53

  • SSDEEP

    1536:Wc6sqFJ4llMfsE3rl4kkbRsDKAJ0OgnB:Wc18J4l+fT3pkbReB0OgB

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

92.255.85.66:7000

Attributes
  • install_file

    USB.exe

Targets

    • Target

      4dc4a9ba4333732819395bbef22584fb.exe

    • Size

      51KB

    • MD5

      4dc4a9ba4333732819395bbef22584fb

    • SHA1

      2afd5bc52aa4308095ccc6149a184b37ed5824a1

    • SHA256

      b9321acd5582848dd946117d94aa70d3ae1f3a7a51971a13a7ceb0aad4199d6a

    • SHA512

      cebda37fe16f86b72da8d23bf0bc0b7ce8ca23c35607d355bc15bf5e890e67f9cdc4429a54f8cc5b569da19d0fd1a655c9f027cbf820700cd095d33591c59d53

    • SSDEEP

      1536:Wc6sqFJ4llMfsE3rl4kkbRsDKAJ0OgnB:Wc18J4l+fT3pkbReB0OgB

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks