Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

BendoverSigmamale.txt

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    BendoverSigmamale.txt

  • Size

    84B

  • Sample

    250301-k62phsw1cz

  • MD5

    cdf6323eb09dd21e75cb9522673454a6

  • SHA1

    1ea967462a8f36c272121cdc3b8690349866ffbf

  • SHA256

    86889ecf3607b844d05f3ce68192ed32ca1eb5a554890a2fc5324693c58dcf21

  • SHA512

    7813f570d4a398e91bd8b53926c984267d2aa7747cd79df086d3b4cc91bfe1d6621a2999c6cc8c58bfc2df84e3edf52277c4a18e3449e54706180a98c81ffa31

Score
10/10
xwormdiscoveryrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

Mutex

Ce4ySYnAtrKbWNiJ

Attributes
  • install_file

    USB.exe

  • pastebin_url

    https://pastebin.com/raw/mAVFPFiv

aes.plain

Targets

    • Target

      BendoverSigmamale.txt

    • Size

      84B

    • MD5

      cdf6323eb09dd21e75cb9522673454a6

    • SHA1

      1ea967462a8f36c272121cdc3b8690349866ffbf

    • SHA256

      86889ecf3607b844d05f3ce68192ed32ca1eb5a554890a2fc5324693c58dcf21

    • SHA512

      7813f570d4a398e91bd8b53926c984267d2aa7747cd79df086d3b4cc91bfe1d6621a2999c6cc8c58bfc2df84e3edf52277c4a18e3449e54706180a98c81ffa31

    Score
    10/10
    xwormdiscoveryrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks