Overview

overview

10

Static

static

10

cheatengine.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cheatengine.exe

  • Size

    42KB

  • Sample

    250306-p9m3raywgw

  • MD5

    fe3ecd7a7068b85e5c1a1c8833e1b5ac

  • SHA1

    ebbd9a0b9f54fe308f1a40bd737deeb812f34415

  • SHA256

    42a43122a976de6400853bcb4d91eb6fc01b33e323e9c44e9d4740c978180a8e

  • SHA512

    87f75872aa6630d5093b2065ab6fc0f80d981ddbbddaef339d99f5a6a3e18e4313f502b300d468ac248e4ad807852c3732c554541e6d83e63165108b12e04c76

  • SSDEEP

    768:+RPD9OQhx/BZ3Tw4xKdVFE9jffOjhBbAds4S1EAd8II1:+d9OW/Z3U4xcFE9jffOjP0dS1EAd8II1

Score
10/10
xwormdiscoveryrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

Idlerkik-51025.portmap.host:51025

Mutex

a1yX5464i0yhChwC

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target

      cheatengine.exe

    • Size

      42KB

    • MD5

      fe3ecd7a7068b85e5c1a1c8833e1b5ac

    • SHA1

      ebbd9a0b9f54fe308f1a40bd737deeb812f34415

    • SHA256

      42a43122a976de6400853bcb4d91eb6fc01b33e323e9c44e9d4740c978180a8e

    • SHA512

      87f75872aa6630d5093b2065ab6fc0f80d981ddbbddaef339d99f5a6a3e18e4313f502b300d468ac248e4ad807852c3732c554541e6d83e63165108b12e04c76

    • SSDEEP

      768:+RPD9OQhx/BZ3Tw4xKdVFE9jffOjhBbAds4S1EAd8II1:+d9OW/Z3U4xcFE9jffOjP0dS1EAd8II1

    Score
    10/10
    xwormdiscoveryrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks