Overview

overview

10

Static

static

10

Nincsmeger...67.exe

windows7-x64

10

Nincsmeger...67.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Nincsmegerstve50667.crdownload

  • Size

    75KB

  • Sample

    250303-sewces1shw

  • MD5

    9fb584a7f293aa900e682cabe3faefcc

  • SHA1

    043d316155bf973a2bb8f1d4ed29c2db7568854b

  • SHA256

    22adf85ad4591d2c4871440fe7ed023575be15e202ca0abe54c17c77cddca990

  • SHA512

    5c77d9d656357416b0663b437104702fcc3060ec1612726d07ee557b74f0c845725435a69c8090c20f6410e6ef4899d1347f201365b493a7ed739b9057b20b5a

  • SSDEEP

    1536:GuIFQo65XTfSBtcLuJ5Hp+b5oFN7aS4V2EOOo/Z3VI8Ev:GuxJYL+b5z1OO2Z3VInv

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

C2

127.0.0.1:7000

Attributes
  • install_file

    USB.exe

Targets

    • Target

      Nincsmegerstve50667.crdownload

    • Size

      75KB

    • MD5

      9fb584a7f293aa900e682cabe3faefcc

    • SHA1

      043d316155bf973a2bb8f1d4ed29c2db7568854b

    • SHA256

      22adf85ad4591d2c4871440fe7ed023575be15e202ca0abe54c17c77cddca990

    • SHA512

      5c77d9d656357416b0663b437104702fcc3060ec1612726d07ee557b74f0c845725435a69c8090c20f6410e6ef4899d1347f201365b493a7ed739b9057b20b5a

    • SSDEEP

      1536:GuIFQo65XTfSBtcLuJ5Hp+b5oFN7aS4V2EOOo/Z3VI8Ev:GuxJYL+b5z1OO2Z3VInv

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks