Overview

overview

10

Static

static

10

XClient.exe1.exe

windows7-x64

10

XClient.exe1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    XClient.exe1.exe

  • Size

    33KB

  • Sample

    250314-k7zljs1ks6

  • MD5

    1fe86f0bbb009253ce910b58986a7e3e

  • SHA1

    a4d65c837f39c7ab3ccbddad520c85171984d959

  • SHA256

    7b79046511bb3e926c5c91db54dae79c06bc19f7d7cdfcfe6df9627eb257cac7

  • SHA512

    24034bd34e5dee4a8452c2ca872847ac5eb655a0e5bd4c822c50553e022defecbc58a3cc50d19a0b7b86785841c0d6b7b04f6b483e030cc47ae4bf3aeea8ae6f

  • SSDEEP

    768:D+CD9VERUnqNIUoFqimZoVFY9jYOjh4bZ:Dh9VUNITHm0FY9jYOj+9

Score
10/10
xwormrattrojan

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:7000

87.121.79.75:7000
Mutex

YJMntxWUG8GqfQnk

Attributes
  • install_file

    USB.exe

aes.plain
1
fC1QVbnQ7pisTRo5FtTycA==

Targets

    • Target

      XClient.exe1.exe

    • Size

      33KB

    • MD5

      1fe86f0bbb009253ce910b58986a7e3e

    • SHA1

      a4d65c837f39c7ab3ccbddad520c85171984d959

    • SHA256

      7b79046511bb3e926c5c91db54dae79c06bc19f7d7cdfcfe6df9627eb257cac7

    • SHA512

      24034bd34e5dee4a8452c2ca872847ac5eb655a0e5bd4c822c50553e022defecbc58a3cc50d19a0b7b86785841c0d6b7b04f6b483e030cc47ae4bf3aeea8ae6f

    • SSDEEP

      768:D+CD9VERUnqNIUoFqimZoVFY9jYOjh4bZ:Dh9VUNITHm0FY9jYOj+9

    Score
    10/10
    xwormrattrojan

    • Detect Xworm Payload

    • Xworm

      Xworm is a remote access trojan written in C#.

      trojanratxworm

    • Xworm family

      xworm
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.