General

  • Target
    XWormMac.exe
  • Size 32KB
  • Sample260803-jwc3qsec86
  • SHA256 d8f85098055b0b705e3e095edd62bd96ec19ea140145d5f1b68480565a72f369
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • xworm

Version
  • XWorm V6.5 b2Y MacH2cker

C2
  • 24.tcp.cpolar.top:10236

Mutex
  • ELOvhq0tOuDpQDLW

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target
      XWormMac.exe
    • Size 32KB
    • SHA256 d8f85098055b0b705e3e095edd62bd96ec19ea140145d5f1b68480565a72f369
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks