General

  • Target
    ClownfishVoiceChanger.exe
  • Size 84KB
  • Sample260804-tfm8watgqe
  • SHA256 09fd4aa2cec99596250385674ffd48b462c0e9914564af86a5053aaf63327e72
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • xworm

Version
  • 3.0

C2
  • 128.234.24.39:1876

Mutex
  • 8yXhthFwhDwHCVCU

Attributes
  • install_file

    USB.exe

aes.plain

Targets

    • Target
      ClownfishVoiceChanger.exe
    • Size 84KB
    • SHA256 09fd4aa2cec99596250385674ffd48b462c0e9914564af86a5053aaf63327e72
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Detect Xworm Payload

    • Family: Xworm

      Xworm is a remote access trojan written in C#.

MITRE ATT&CK Matrix

Tasks