Overview

overview

10

Static

static

10

Project Jti.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Project Jti.exe

  • Size

    32KB

  • Sample

    250302-xt1yns11as

  • MD5

    e18c2cd93f81b14a5ac8125510420c7b

  • SHA1

    d78d0ec720163f40d6dd7bc522c55bf3432b4286

  • SHA256

    8d9ae30bb7c7fd3223f66cfc8d2d8d846fb911b02d003b1f7ee2ea436749062e

  • SHA512

    35a6bdf59ece87105205ee2f6ffa361b18e402991d259ee30fd8b509fb89f40b49d8c3c99cad0c66c3aff4e977a9cb308adce1203d67093d7869ace788fe0ab7

  • SSDEEP

    768:pVa+vNtg+PB93Tw4xKdVFE9jTOjh3b1Y:BvNtgw93U4xcFE9jTOj5xY

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:7000

Mutex

N2exJzPwtKFifSU8

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      Project Jti.exe

    • Size

      32KB

    • MD5

      e18c2cd93f81b14a5ac8125510420c7b

    • SHA1

      d78d0ec720163f40d6dd7bc522c55bf3432b4286

    • SHA256

      8d9ae30bb7c7fd3223f66cfc8d2d8d846fb911b02d003b1f7ee2ea436749062e

    • SHA512

      35a6bdf59ece87105205ee2f6ffa361b18e402991d259ee30fd8b509fb89f40b49d8c3c99cad0c66c3aff4e977a9cb308adce1203d67093d7869ace788fe0ab7

    • SSDEEP

      768:pVa+vNtg+PB93Tw4xKdVFE9jTOjh3b1Y:BvNtgw93U4xcFE9jTOj5xY

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1

MITRE ATT&CK Matrix

Tasks