General

  • Target
    Ahack.exe
  • Size 32KB
  • Sample260722-ek6tfscq6z
  • SHA256 d12b376c8ec4a5daf6322068a5f680508429458a21cad4fd21d20b6b5302b748
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • xworm

Version
  • 5.0

C2
  • DDDddddf-47064.portmap.host:47064

Mutex
  • yiJ89Yd9sw0JqUAN

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target
      Ahack.exe
    • Size 32KB
    • SHA256 d12b376c8ec4a5daf6322068a5f680508429458a21cad4fd21d20b6b5302b748
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks