Overview

overview

10

Static

static

10

Haimuniu_V...nt.exe

windows10-2004-x64

Haimuniu_V...nt.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    Haimuniu_VPN_Client.exe
  • Size 85KB
  • Sample260411-ktvqfabs2k
  • SHA256 85e88c590e90c18fe0307d7b8ef1faaf8911d22b0da34c5afc7dea8d81adc99b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
xworm

Malware Config

Extracted

Family

  • xworm

C2

  • 156.238.239.253:7000

  • 66.175.239.149:7000

  • 185.117.249.43:7000

Attributes
  • Install_directory

    %AppData%

  • install_file

    WmiPrvSE.exe

Targets

    • Target
      Haimuniu_VPN_Client.exe
    • Size 85KB
    • SHA256 85e88c590e90c18fe0307d7b8ef1faaf8911d22b0da34c5afc7dea8d81adc99b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks